#ssl#tls#certificateauthorities
419K subscribers • 61 videos on Hallway • Conference channel
Intermediate. Assumes working knowledge.
11K views13 years ago4 recommendations
SecurityWeb developmentCryptographyWeb and application securityHow browsers work
Moxie Marlinspike critiques the Certificate Authority system of SSL/TLS and proposes an alternative trust model.
Moxie Marlinspike - SSL And The Future Of Authenticity In the early 90's, at the dawn of the World Wide Web, some engineers at Netscape developed a protocol for making secure HTTP requests, and what they came up with was called SSL. Given the relatively scarce body of knowledge concerning secure protocols at the time, as well the intense pressure that everyone at Netscape was working under, their efforts can only be seen as incredibly heroic. But while it's amazing that SSL has endured for as long as it has, some parts of it -- particularly those concerning Certificate Authorities -- have always caused some friction, and have recently started to cause real problems. This talk will examine authenticity within SSL, shed new light on the current problems, and cover some new strategies for how to move forward.What people say. Highly recommended as an excellent and entertaining explanation of the structural flaws in the TLS certificate authority system.
mashedvikingson Hacker News • Recommends
On “Mythology About Security”
8organicbitson Hacker News • Recommends
On “Weakening TLS protection, South Korean style”
maqpon Hacker News • Recommends
On “Encrypted web traffic now exceeds 90%”
mbakkeon Hacker News • Recommends
On “Security expert warned SolarWinds in 2019 that anyone could access server”
arantiuson Hacker News • Mentions
On “Moving forward on improving HTTP's security”
1cvmaskon Hacker News • Mentions
On “YouTube removed a Cybersecurity channel without much reason”
cypharon Hacker News • Mentions
On “Let's Not Encrypt (2019)”
cypharon Hacker News • Mentions
On “Parallel Reconstruction of Lawful TLS Wiretapping”