CAs for spies?

[Steve Bellovin]

Have you ever wondered what CA a spy agency would trust?  In the case 
of the Mossad, it's Thawte.

Go to http://www.mossad.gov.il/Mohr/MohrTopNav/MohrEnglish/MohrAboutUs/
and click "Contact Us" or "Application Form".  You'll get an 
SSL-protected connection, with a 1024-bit RSA key (with MD5) in a 
certificate issued by Thawte.  The connection itself used 256-bit AES.

		--Steve Bellovin, http://www.research.att.com/~smb


---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com