News for hackers. Stuff that matters.
Re:Steam hit by major security breach by nly on Monday July 27, 2015 @01:03PM (#9956470)
You can't do passive MITM of TLS if the server is properly configured to use ephemeral key exchange, even if you have its private key. And even without ephemeral kex, and you somehow obtain a secondary trusted CA-signed cert for Steams domain, you still can't do passive MITM.

JS crypto really is worthless if you can't trust the connection.

There are no comments on this comment yet.