bingo<p>check and mate<p>TLS Certificate MITM Is now the fucking de-facto crypto<p>thats the end of the story as far as ssl&#x2F;tls security goes.. you wont hear about it anymore.<p>and if you dont have it you are not trustworthy. thats it. no objections. no court hearing. youre just done.<p>(its probably a good time to bring up the W3C president states this is not https3 this is tls labeled as https. and the 4 show stopping bugs tls has had so far. the downgraded exploitable encryption for other countries. the noob crypto bugs like null nonce&#x2F;reusing nonce and the other one i forget, the authors published MITM kit, or the open bug for 1 year in usersupplementaldata for a buffer overflow, and how the heartblood code was using variables &#x27;payload&#x27; not &#x27;buf&#x27; or &#x27;msg&#x27; but you know those were already downvoted -15 on HN. could also bring the fact they pushed this into all the popular ssh clients and the ssl, and IRC, so now they are capturing way more ssh, irc, and ssl.)