On 06/10/2013 03:30 PM, Fred Bauder wrote: >> Encrypted, if you're using https everywhere (and Wikipedia hasn't > intentionally or unintentionally compromised their certificate). >> > > But simple encryption that NSA can break at will.
No one will bother trying to break SSL/TLS. The NSA certainly doesn't need to. They can just sign their own certificates and perform man-in-the-middle attacks. Browsers will in most cases accept those forged certificates, since the NSA can make sure that they are signed by a CA trusted by many browsers. A bit off-topic, but this talk explains everything wrong with the certificate system: https://www.youtube.com/watch?v=Z7Wl2FW2TcA -- Tobias _______________________________________________ Wikimedia-l mailing list [email protected] Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l
