Detecting potential legal decryption of historical data

摘要

Systems and methods provide for detecting the potential legal decryption of transmitted data. When a device connects to a server over a network, such as the Internet, the device determines whether a cipher without forward secrecy is used. If so, information regarding the connection is stored in a log. When the device subsequently connects to the server and receives a response code indicating that a resource is not available for legal reasons, the device checks the log to determine if the device has previously communicated with the server using a cipher without forward secrecy. Based on the check, the previous connection with the server is identified from the log. A message is presented indicating that data from the previous connection could be subject to legal decryption.