Hacker News Reader

Which doesn't prevent a MITM at all, as the NSA can create their own private key and CSR.

It's always hard to read such light grey text, I misread it as "giving them our private keys".