|
The author protests SSL/TLS certificate complexity by deliberately creating a weak certificate with a vanity private key (313333333337) for their website, making the security flaw obvious rather than hidden. They argue that while encryption is necessary to prevent eavesdropping, the current certificate authority system is flawed and overly complicated, making a deliberately broken certificate a better statement than maintaining the status quo. The certificate they obtained contains readable text in the public key mocking certificate authorities, demonstrating how little scrutiny these systems actually receive.
Read Full Article →
← Back to latest