[ryacko]

A good argument could be that the NSA is violating the intent of Congress by weakening encryption standards which are essential to online commerce. Could even be extended to authentication standards which there can be no legal restriction on.

[debatem1]

Wouldn't this be "weak encryption is used for offensive purposes as well"?

[ryacko]

No, this would be [insult to the NSA] at the idea of packet injection by controlling all the major backbones, and endorsing unauthenticated protocols.

The DoD’s faith in PKI is so great that many public facing DoD websites are signed by the DoD root CA.