News for hackers. Stuff that matters.

A comment on Launching in 2015: A Certificate Authority to Encrypt the Entire Web. Parent comment

Re:Launching in 2015: A Certificate Authority to Encrypt the... by SilasX on Wednesday November 19, 2014 @12:08AM (#8628381)
You're saying that everyone able and willing to passively snoop, is also able and willing to compromise the channel and mimic the server?
[ Parent | on HN ]
Re:Launching in 2015: A Certificate Authority to Encrypt the... by tptacek on Saturday November 22, 2014 @08:40AM (#8645524)
Correct.
[ Parent | on HN ]
Re:Launching in 2015: A Certificate Authority to Encrypt the... by SilasX on Sunday November 23, 2014 @03:53PM (#8649893)
Then I don't see how that would be true. Mimicking a server requires significantly more effort that simply storing the traffic. So even if someone were able, it doesn't follow that they would want to go through that effort in every case.
[ Parent | on HN ]