On 06/21/2013 03:32 PM, Michael Horowitz wrote: > Just an FYI. Without Perfect Forward Secrecy, HTTPS may not offer much > protection from NSA spying. > > Perfect Forward Secrecy can block the NSA from secure web pages, but no one > uses it > > http://blogs.computerworld.com/encryption/22366/can-nsa-see-through-encrypted-web-pages-maybe-so > > Michael Horowitz
EFF is working on promoting PFS and trying to get more websites to start using it. However, even without PFS I still think HTTPS is much, much better than nothing. Without PFS, NSA still needs the SSL keys from target websites to spy on HTTPS users, which they may or may not be able to get for any specific website. However without HTTPS at all NSA can and does spy on everything it can see. -- Micah Lee Staff Technologist Electronic Frontier Foundation https://eff.org/join @micahflee
signature.asc
Description: OpenPGP digital signature
_______________________________________________ HTTPS-everywhere mailing list [email protected] http://lists.eff.org/cgi-bin/mailman/listinfo/https-everywhere
