Hacker News Reader

> Right now we need to find out which (root?) CAs are compromised by the NSA.

Given that basically all CAs people actually use (even in Europe) are owned by US companies, I would estimate something close to 100% of them have cooperated with the NSA at some point. Obviously there are non-US CAs like China's CNNIC but most of them won't actually sell you a certificate.

View on HN

If the NSA is doing this "legally" via secret courts etc... Then you have to assume every company subject to US law can't be trusted.

...and any CA outside the US is compromised by China, India, UK, etc.

We already know that we can't trust most major US companies. What compromised CAs mean is that we also can't even trust non-US companies due to our dependence on US CAs for TLS to actually be usable.

Reply on news.ycombinator.com