Hacker News new | ask | show | jobs
by assafs 4737 days ago
A good deal of encrypted material these days depends on the security of the private key, though -- e.g., HTTPS loses a good deal of security if the server's private key is known.

Given the reach of PRISM and related projects, and given that a lot of the internet was using 1024-bit RSA keys for HTTPS, it's a good question wondering how much of those private keys are still ... private.

2 comments

I have always wondered about this. What kind of security do you really get if, for example, your SSL key is distributed to a couple thousand CloudFlare servers all over the world?
Zilch. Cryptographic security depends on good key management practices.
What you have just mentioned is talked about here: https://news.ycombinator.com/item?id=5933784