How? Doesn't HTTPS offer E2E interception?
Do they have the ability to compromise that, or can they 'merely' ask the owner of the endpoint you are talking to to rat you out?
Do they have the ability to compromise that, or can they 'merely' ask the owner of the endpoint you are talking to to rat you out?
An offline attack against the host's keys that relies on undisclosed vulnerabilities, or an online one against their infra that abuses recent CVEs and bad security also seem possible.
Because of the same chain of trust, you can just ask the root authority to give you a certificate for peer's identity.
A slip of keyboard I assume?