Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That question cannot be answered, sorry. Cryptographically it is sound today. But that point is entirely moot if the NSA has the CA private key, or has access to your computer.

Do you think it's easier to discover attacks on AES or court order CA's?

You need to trust your OS, Chrome cryptography implementation, AES and RSA, and the end point, its OS and its possible role as a mute puppet, oh and don't forget everyones hardware!.



The point is not mooted if NSA has compromised a CA, because Chrome does more than simply trusting the CAs.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: