Certified Lies: Detecting and Defeating Government Interception Attacks against SSL(Short Paper)

摘要

This paper introduces the compelled certificate creation attack, in which government agencies may compel a certificate authority to issue false SSL certificates that can be used by intelligence agencies to covertly intercept and hijack individuals' secure Web-based communications.