Comment

Comment by uh_oh

My understanding is that MITM (but in a perfect way, using the leaked private key) is still required, if ephemeral Diffie-Hellman is involved. You can't just passively record the stream and decrypt it, since you don't know the exchanged DH secret.

The suggestion that the companies actually gave them the keys and this explains the "direct access" phrase makes a lot of sense!

parent uh_oh 13 years ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton