News for hackers. Stuff that matters.

A comment on Google Can Bring an End to Censorship in 10 Days. Parent comment

Re:Google Can Bring an End to Censorship in 10 Days by onedognight on Saturday November 23, 2013 @09:44AM (#6786032)
> By the theory of SSL, an 'attacker' is not supposed to have control over a 'trusted' CA, so SSL is 'supposed to' protect against this.

Every major government has a CA cert in your browser. SSL was obviously designed to be subverted in exactly this way. You won't even get a warning. Google pins their own certs in their own browser, but Moxy's Convergene.io or something like TACK would need to be implemented by Google and Mozilla for you to have a fighting chance.

[ Parent | on HN ]
Re:Google Can Bring an End to Censorship in 10 Days by livnev on Saturday November 23, 2013 @10:10AM (#6786119)
Exactly. But the important point is that the current situation with CAs may be flawed, but since ultimately the user has control over which certificates to trust, it will be possible to use better trust models (like convergence.io) to eliminate censorship. After that, we can indeed use encryption to fight censorship.
[ Parent | on HN ]
Re:Google Can Bring an End to Censorship in 10 Days by untothebreach on Saturday November 23, 2013 @10:08AM (#6786116)
Is convergence.io still a viable project? Last time I checked the github repo it looked to be abandoned.
[ Parent | on HN ]