Back to all stories
LobstersHN🔥2seen ×7

Horrible public key tricks(maurycyz.com)

The article discusses the frustrations with the SSL/TLS certificate system, citing the complexity of the "ACME" dance and the need for frequent certificate renewal. The author argues that the system is flawed, with certificates being issued over plaintext connections and trusted authorities using insecure keys. As a form of protest, the author suggests using a deliberately weak certificate with a vanity private key, making the weakness obvious to highlight the issues with the current system. The article provides an example of such a protest certificate, which can be easily identified as insecure, to demonstrate the need for a better approach to encrypting web traffic.