How fucked is SSL?gist.github.com 19 pointsjacobian13 years ago1 commentSaveHideCopy link On HNComments−anologwintermut13yGoogle actually has forward secrecy which prevents an attacker from doing anything passive even if they have google'e key. http://www.imperialviolet.org/2011/11/22/forwardsecret.htmlOf course, if they have access to google's servers(and can get the ephemeral keys) or can mount active attacks, this doesn't stop anything.
Comments
Google actually has forward secrecy which prevents an attacker from doing anything passive even if they have google'e key. http://www.imperialviolet.org/2011/11/22/forwardsecret.html
Of course, if they have access to google's servers(and can get the ephemeral keys) or can mount active attacks, this doesn't stop anything.