[Cryptography] WireGuard

[Christian Huitema]

On 9/2/2018 7:17 PM, Phillip Hallam-Baker wrote:
>
>     And a design brief where a random nation state can create a
>     certificate for microsoft.com <http://microsoft.com> is a good one?!?
>
>
> It enabled Amazon and online commerce. It has worked for 20 years.
> Nation state attacks tend to be mitigated by their reluctance to get
> caught. Though not always. Skripal was obviously attacked with the
> nerve agent to leave no doubt as to who was behind it. Though that
> game is rather more desperate and higher stakes than most.

There was a nation state, Iran, behind the Diginotar attack. The attack
enabled them to create fake certs for Google, so as to spy on Gmail
traffic. I would not say that all nation states exhibit "reluctance to
get caught".

-- Christian Huitema
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20180903/40957f09/attachment.html>