New German law would force ISPs to allow secret service to install trojans

Post by throwawayway9 » Thu, Jul 09, 2020, 9:39 PM UTC

akersten wrote: post #81

lazaroclapp wrote: post #57

Earlier quoted context omitted.

Presumably, Germany would have little trouble compelling at least one root CA to sign any TLS certificates they wanted. Just a cursory search shows that Google Chrome, on Linux, trusts, e.g. > CN = D-TRUST Root CA 3 2013 > O = D-Trust GmbH > C = DE There is certificate transparency and pinning and so on, and they would be caught (probably, maybe) if they abused this carelessly and at scale, but in practice, for a sma…

Google, Mozilla, et al. should make a commitment to revoke the trust of any CA that is found to partake in behavior like that. Even retroactive revocation of existing certificates shouldn't be off the table if the offense is egregious enough. It's actually pretty scary seeing just how many CAs are in the list of trusted CAs on any given device. While no government is beyond reproach, I do wish there were a way for me…

Post by aSplash0fDerp » Thu, Jul 09, 2020, 9:51 PM UTC

DyslexicAtheist wrote: post #89

opqpo wrote: post #48

What does "trojans at ISPs" even mean? TLS works end-to-end and ISPs can do absolutely nothing to see the plaintext. It's unless the CAs at users-side are manually replaced with fake ones nothing can be done. I've never used Windows since I was a kid but I am sure this is pretty much impossible on Linux for example since adding CAs require root privilege.

think mobile - isp are the place to conduct baseband attacks from.

Post by Jon_Lowtek » Thu, Jul 09, 2020, 10:00 PM UTC

opqpo wrote: post #48

What does "trojans at ISPs" even mean? TLS works end-to-end and ISPs can do absolutely nothing to see the plaintext. It's unless the CAs at users-side are manually replaced with fake ones nothing can be done. I've never used Windows since I was a kid but I am sure this is pretty much impossible on Linux for example since adding CAs require root privilege.

Post by seph-reed » Thu, Jul 09, 2020, 10:08 PM UTC

Post by bserge » Thu, Jul 09, 2020, 10:13 PM UTC

azinman2 wrote: post #30

Pretty shocking in a state that has such strict privacy laws. Not sure how the two can come from the same mouth, and even be in public view. My understanding is that the privacy restrictions are largely the result of half the country having lived under the Statsi, and thus being extremely weary of government eyes. Here it’s out in the open!