2026-08-03 12:53 UTC
Have you seen any evidence of the famous « collect encrypt data and decrypt later » in incident response ?
Until now, I haven’t.
#pqc #crypto #cryptography #dfir
Replies (1)
-
@DaveMWilburn@infosec.exchange 2026-08-03 13:00
@adulau@infosec.exchange With modern TLS? I can't think of anything. But in the past you could do this if you did full content pcap collection in conjunction with a MitM proxy on your own network.