Luckily, it has now expired and was not renewed. Some reading on this very controversial section:
https://www.csis.org/analysis/fact-sheet-section-215-usa-pat...
As if the three-letter agencies never tried to cripple encryption before September 11th, 2001...
https://weakdh.org/imperfect-forward-secrecy-ccs15.pdf
Basically, for about $100M per prime (probs cheaper now), you can pre compute a big table that you can use to decrypt the diffie hellman exchange. From there you have the negotiated private keys, and you're off to the races for a full, real time decrypt. Since before the Snowden leaks, there wasn't the public thought that the choice of primes for diffie hellman mattered really for it's security, most implementations hardcoded the prime. Something like 92% of the top 1 million https sites were using the same 2 primes, and similar numbers of VPN and SSH implementations were vulnerable too.
So for a one time cost of ~$200m the NSA was able to decrypt the vast majority of internet traffic as long as they caught the diffie hellman exchange at the beginning.
"An internal investigation by the C.I.A. has found that its officers penetrated a computer network used by the Senate Intelligence Committee in preparing its damning report on the C.I.A.’s detention and interrogation program. "
https://mobile.nytimes.com/2014/08/01/world/senate-intellige...
You do know they have the worst dirt on everyone right?
step1. public pressures on the electorate
step2. electorate pressures on spying agencies
... and step1 is impossible in China
I will add more:
- where is the pressure to close Guantanamo?
- where is the pressure to como clean with the lies leading to the Irak war?
There is a lot of it. However, it's countered by the pressure of, "Where do we send those people? My constituents don't want them in our district."