New Threat To HTTPS?

[kf4hcw]

On 03/18/2017 08:11 PM, Richard Demaret wrote:
> Is this a new threat to HTTPS?

No. It's an old one.
There are many reasons various agencies want to MIM secure connections. 
Some good, some evil, and all perilous.

In theory it shouldn't work --- so doing it typically requires 
information that would normally be inaccessible; but is exposed for 
special reasons -- at least that's the best case scenario.

Trouble is -- how do you do something that shouldn't be done "correctly" 
and what are the consequences of not doing it correctly?

Get it wrong and security is weakened. Technically, doing it at all 
requires FIRST that security is weakened -- but typically somebody has 
already decided that this weakness is the lesser of two evils (again 
best case scenario).

_M


-- 
kf4hcw
Pete McNeil
lifeatwarp9.com/kf4hcw