Re: ca-certificates: no more cacert.org certificates?!?
On Wed, Apr 2, 2014 at 6:09 PM, Matthias Urlichs wrote:
> Somebody could passively log the connection for later analysis.
> Your argument does not hold for this case.
I don't have an argument, I'm saying that Snowden revealed that global
active adversaries like the NSA and GCHQ have been doing this for a
while. Logging ciphertext via passive MITM and breaking endpoint
security to defeat encryption globally.
--
bye,
pabs
http://wiki.debian.org/PaulWise
Reply to: