Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

See X-Keyscore: NSA tool collects "nearly everything a user does on the internet".
http://www.theguardian.com/world/2013/jul/31/nsa-top-secret-program-online-data

Does anyone have a clue how they collect the traffic in the first place and whether they decrypt HTTPS traffic or not? (For example, by stealing the private RSA key…)

Not many HTTPS sites use perfect forward secrecy.

How would you explain the interception of the Facebook chats? Facebook does use SSL.

share|improve this question

closed as primarily opinion-based by Xander, Adnan, Steve, TildalWave, NULLZ Jul 31 '13 at 21:50

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise.If this question can be reworded to fit the rules in the help center, please edit the question.

    
I doubt anyone will get an official statement by the NSA — the only party which could answer that beyond any reasonable doubt. –  e-sushi Jul 31 '13 at 17:19
1  
Keep in mind that this operation has been going on for many years, and the web sites in question have only recently gone to 100% HTTPS. –  Michael Hampton Jul 31 '13 at 21:05
    
@MichaelHampton Are you referring to Firesheep-like session cookie stealing and the CRIME and BEAST HTTPS attacks? –  user129789 Jul 31 '13 at 21:18
1  
No, I mean that it's trivial to sniff HTTP traffic. –  Michael Hampton Jul 31 '13 at 21:19

1 Answer 1

Feds put heat on Web firms for master encryption keys:

If the government obtains a company's master encryption key, agents could decrypt the contents of communications intercepted through a wiretap or by invoking the potent surveillance authorities of the Foreign Intelligence Surveillance Act. Web encryption -- which often appears in a browser with a HTTPS lock icon when enabled -- uses a technique called SSL, or Secure Sockets Layer. "The government is definitely demanding SSL keys from providers," said one person who has responded to government attempts to obtain encryption keys. The source spoke with CNET on condition of anonymity. The person said that large Internet companies have resisted the requests on the grounds that they go beyond what the law permits, but voiced concern that smaller companies without well-staffed legal departments might be less willing to put up a fight. "I believe the government is beating up on the little guys," the person said. "The government's view is that anything we can think of, we can compel you to do."

How they do it? probably like this (see wikipedia):

Room 641A is a telecommunication interception facility operated by AT&T for the U.S. National Security Agency that commenced operations in 2003 and was exposed in 2006.

and this:

GCHQ taps fibre-optic cables for secret access to world's communications British spy agency collects and stores vast quantities of global email messages, Facebook posts, internet histories and calls, and shares them with NSA, latest documents from Edward Snowden reveal

share|improve this answer
2  
Answers that contain only links are prone to link-rot, and eventually become useless. Please take a quote from the article and sum up your own thoughts on it, so that it's a proper answer. –  Polynomial Jul 31 '13 at 16:10

Not the answer you're looking for? Browse other questions tagged or ask your own question.