The SSL key is only for the transport correct? My assumption is that the data in storage would still be encrypted by the customer's private keys. The USG could then obtain the private keys of the customer by watching the decrypted SSL traffic, and is also why the gag order would be very important to the case.
I think this is a pretty big misunderstanding by the author of the article.
No comments yet.