Perfect Forward Secrecy can block the NSA, but almost no one uses it
Chrome should change the lock icon to something weaker for sessions that don't use ephemeral keys.This may be the most important article on HN related to the NSA leaks. Fact is, most of us haven't paid enough attention to the details of https.EDIT: "something weaker" - didn't mention color. People dont need to understand "forward secrecy", the browser just needs to raise the bar for what's considered secure. The goal is to change server-side behavior, not consumer behavior.