Possible Duplicate:
Can real end-to-end SSL encryption be made?
Regarding this piece of news, I wonder how can Nokia so easily decrypt HTTPS data?
As I understand the data is encrypted by a public key on user-end, and can only be decrypted by the private key. However, I assume Nokia doesn't have the private key and they cannot brute force the data either. In that case, how are they doing it?