Hacker News Reader

Which is why certificate signing requests contain only the public key.

Which doesn't prevent a MITM at all, as the NSA can create their own private key and CSR.

It's always hard to read such light grey text, I misread it as "giving them our private keys".