Perfect Forward Secrecy can block the NSA, but almost no one uses it
Chrome should change the lock icon to something weaker for sessions that don't use ephemeral keys.<p>This may be the most important article on HN related to the NSA leaks. Fact is, most of us haven't paid enough attention to the details of https.<p>EDIT: "something weaker" - didn't mention color. People dont need to understand "forward secrecy", the browser just needs to raise the bar for what's considered secure. The goal is to change server-side behavior, not consumer behavior.