Vai al contenuto principale

Commenti (10)

@tom7@mastodon.social I will say that your statement of "how hard could it be to roll you own crypto" quickly followed by "the professionals can even do it right" are quite the complimenting pair lmao

0

@tom7@mastodon.social ha, I didn't know you were on here. nice. I loved every minute of this. can't beat a good cheeky jab at security maximalism.

0

@tom7@mastodon.social the jokes in this video are just 😗👌

0

@tom7@mastodon.social i love the comment about the -o- option in curl

0

@tom7@mastodon.social very rebel thank you tom

0

@tom7@mastodon.social I work on certbot. This paper has caused me psychological distress. I immediately shared it with everyone I work with in any professional context.

0

@tom7@mastodon.social Argh, my eyes!!! Should've gotten an AI to help you with the title.

0

@tom7@mastodon.social I can't access your https-website using @librewolf@chaos.social :(

Error from librewolf

Secure Connection Failed

An error occurred during a connection to tom7.org. Peer attempted old style (potentially vulnerable) handshake.

Error code: SSL_ERROR_UNSAFE_NEGOTIATION
0

@tom7@mastodon.social
At first I thought you were over-reacting a bit with this video (I know the over-reaction is the joke, but still), who doesn't love Let's Encrypt?

But certificates also have downsides. Creating a TLS certificate puts your domain on a public list (CT logs), which invites hackers and scrapers to your site.

So even if you claim a name like ae0t6vnr73j7tq1t1s.org, if you want to use it without having to ignore the browser warning, you will have to deal with those other visitors too.

0