Hacker News new | ask | show | jobs
by mirhagk 3608 days ago
Not necessarily. You don't need to introduce compromised crypto (that's exactly the problem that's happening currently). I think the point of the article more shows that by using TLS everywhere the government is incentivized to attack it a lot more.

This isn't just governments either. Corporations do things like proxy HTTP traffic to cache pages and save on bandwidth (some ISPs do it too). By moving that to HTTPS traffic you are removing the ability to do this, and that gives them an incentive to do things like install root certificates for all their devices. Now your banking website has it's traffic sniffed as well, all in the name of caching the youtube videos that get distributed around the office.