On: Weakening TLS protection, South Korean style

[vbezhenar]

As long as they don't MITM, that should be fine. And if they MITM, hopefully browser vendors will blacklist their certificates like they did with similar attempt from Kazakhstan.

[palant → vbezhenar]

Note: I am the author of this article.

And what if somebody else gets hold of their private key and uses it to MITM? I mean, it’s only South Korea, it’s not like they have a neighbor country which would be willing to abuse this kind of thing in targeted attacks…

[ikekkdcjkfke → palant]

And it’s not like said neighbour has abused hacked security tools before