This has been discussed before for years. Anyway, the only thing you can be sure when using an SSL connection is that the link is encrypted, but you know nothing about who or what is at the other side of the connection. All the EV (extended validation) work from the CAs worths nothing when they face a court order (or just any national security-related request). And they cannot tell you they have done it.
For those thinking this is a good or necessary thing... it is good or necessary for the State. If it is good for the rest of us that's a different story.
Regards,
MV
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox
