Newly Declassified Documents Show How the Surveillance State was Born

Re:Newly Declassified Documents Show How the Surveillance St... by chinpokomon on Sunday September 29, 2013 @08:58PM (#6467248)

Any idea why the SSL certificate for that site would be invalid? I'd rather not connect to a site, given the nature of the content, if I can't know who maintains the site and where a valid SSL certificate is a good first step in due diligence.

[ Parent | on HN ]

Re:Newly Declassified Documents Show How the Surveillance St... by rwmj on Monday September 30, 2013 @03:27AM (#6468234)

I'm getting a valid certificate so maybe you are being MITM'd?

[ Parent | on HN ]

Re:Newly Declassified Documents Show How the Surveillance St... by randomdestructn on Sunday September 29, 2013 @11:21PM (#6467598)

I'm getting a valid cert.

http://i.imgur.com/FQ4Yb94.png

[ Parent | on HN ]

Re:Newly Declassified Documents Show How the Surveillance St... by jlgaddis on Monday September 30, 2013 @09:03PM (#6473390)

If/when this happens again, run this command and paste the output:

    $ openssl s_client -showcerts -connect rally.stopwatching.us:443

[ Parent | on HN ]

Re:Newly Declassified Documents Show How the Surveillance St... by kansface on Sunday September 29, 2013 @10:17PM (#6467450)

Why would you care about an invalid cert if you aren't handing over any credentials?

[ Parent | on HN ]

Re:Newly Declassified Documents Show How the Surveillance St... by nitrogen on Sunday September 29, 2013 @10:25PM (#6467466)

An invalid cert could indicate a MITM attack. Even if you're not sending anything down, who knows what they're sending back?

[ Parent | on HN ]

Re:Newly Declassified Documents Show How the Surveillance St... by rwmj on Monday September 30, 2013 @03:29AM (#6468237)

Because someone might alter the content, eg: changing the date of the rally (so some people don't turn up on the right day), or making the event much look more unconvincing so you don't bother going.

[ Parent | on HN ]