5

But recently, with the scandals about the (in)filtrations, I read that the NSA (and of course others, but I'm not particularly worried about NSA) is able to break SSL and track your data.

It is true? What can I do about that, given I do not know much about cryptography?

e-sushi
  • 17,891
  • 12
  • 83
  • 229
Alvaro Fuentes
  • 159
  • 3
  • 3
    It is more realistic (easy) to circumvent breaking the cryptographhy if you are NSA - as we have seen - (MITM, etc.). However, there are also lots of cryptographic "issues". These slides of a keynote by Kenny Paterson on cryptographic issues with SSL/TLS from this year's Indocrypt are quite nice. – DrLecter Dec 20 '13 at 14:41
  • 2
    *Pray…* /* Jokes aside: most things wrong with SSL haven't been solved due to the (s)low adaption rate. */ [+1] on your question though. – e-sushi Dec 20 '13 at 16:39
  • The older SSL/TLS protocol, the less safe. – Abzac Dec 20 '13 at 18:19

3 Answers3

7

I don't think NSA can break the underlying encryption primitives. What they may do is record the whole SSL traffic and decrypt the whole traffic using server private key. So you can use introduce perfect forward security as the blog article “SSL/TLS & Perfect Forward Secrecy” suggests.
In addition man in the middle can be performed with fake certificates. This is relatively easy and not only NSA, but also a hacker can do this. So if you consider other parties except NSA you should look in to this.

deltaaruna
  • 1,448
  • 12
  • 13
3

Good brief topic on security of this protocol for each version can surprisingly easy be found in Wikipedia.

Also, please take a look on blog posts about SSL-stripping attack, also BEAST and SSL Recognition Attacks.

Abzac
  • 263
  • 2
  • 10
1

According to some sources, NSA is actually able to perform man-in-the-middle attacks using fake certificates to impersonate websites. Some people said that they somehow managed to hack a CA and stole compromised certificates. Since SSL/TLS relies mainly on certificates for authentication. With a valid "spoofed" certificate, users are easily tricked into believing that the visited website is authentic. So, the CA themselves are the single point of failure and Achilles heel of a PKI due to its design. But for ordinary users, I don't think anyone will put in so much effort and resources to track you. So no need to worry too much :)

jingyang
  • 734
  • 3
  • 5