loweel’s status on Thursday, 22-Oct-2015 11:09:40 CEST
loweel: I think we need to understand “which use of cryptography”. Take by example your browser: by default it trusts a hundred of “Certification Authority”. So, if one of this “Certification authorities” under control of NSA, NSA can release a valid certificate – which any browser will accept – for any domain, and do as many MIM they want, to whoever. Then, if we mean for “cryptography” the HTTPS for websites, https is not protecting you at all, is not even a thing, until we “trust” an undiscussed list of CA in our browsers and OS. (see /etc/ssl/certs)….
- PS: questo pezzo e le altre magnifiche elargizioni di saggezza di
Uriel FanelliLowEel sono analizzate su un altro blog degli Untermenschen che curano questo specchio.
- PPS: pezzo automagicamente caricato da Fornello!