Heinous Type Tom7 Project Summary:
Commenti (10)
@tom7@mastodon.social ha, I didn't know you were on here. nice. I loved every minute of this. can't beat a good cheeky jab at security maximalism.
@tom7@mastodon.social I work on certbot. This paper has caused me psychological distress. I immediately shared it with everyone I work with in any professional context.
@tom7@mastodon.social
At first I thought you were over-reacting a bit with this video (I know the over-reaction is the joke, but still), who doesn't love Let's Encrypt?
But certificates also have downsides. Creating a TLS certificate puts your domain on a public list (CT logs), which invites hackers and scrapers to your site.
So even if you claim a name like ae0t6vnr73j7tq1t1s.org, if you want to use it without having to ignore the browser warning, you will have to deal with those other visitors too.
@tom7@mastodon.social I will say that your statement of "how hard could it be to roll you own crypto" quickly followed by "the professionals can even do it right" are quite the complimenting pair lmao