News for hackers. Stuff that matters.

A comment on Launching in 2015: A Certificate Authority to Encrypt the Entire Web. Parent comment

Re:Launching in 2015: A Certificate Authority to Encrypt the... by xorcist on Tuesday November 18, 2014 @04:49PM (#8626572)
That would be stupid. Google is a US company. NSA has NSLs. Mission accomplished. No certs involved.
[ Parent | on HN ]
Re:Launching in 2015: A Certificate Authority to Encrypt the... by tomp on Tuesday November 18, 2014 @05:43PM (#8626870)
How did you get Google into all this? If you're implying that Google owns a search site/Gmail/a browser, know that there are alternatives, which NSA's target could be using. A fake certificate from a trusted US CA can MITM any connection to almost any website from almost any browser.
[ Parent | on HN ]
Re:Launching in 2015: A Certificate Authority to Encrypt the... by xorcist on Tuesday November 18, 2014 @06:40PM (#8627139)
That should have been a reply to the sibling comment, where it was implied this would be a strategy against Google.
[ Parent | on HN ]