On: HTTPS and Tor: Working Together to Protect Your Pr...

[summerdown2]

This assumes the NSA don't have a root CA they can use to man in the middle SSL - an assumption that seems unlikely, given other well-publicised breaches of CA's:

http://www.pcworld.com/businesscenter/article/249510/trustwa...

http://www.schneier.com/blog/archives/2010/04/man-in-the-mid...

http://www.darkreading.com/authentication/167901072/security...

http://betanews.com/2010/03/25/has-ssl-become-pointless-rese...

http://lwn.net/Articles/372264/

http://blogs.cisco.com/security/black_hat_usa_2009_summary/

... etc