Photo: U.S. District Court for the Eastern (Cleveland) Division of · Public domain · Wikimedia Commons
Cybersecurity
Horible public key tricks
The author is unhappy with the SSL/TLS certificate system and suggests using a 'protest certificate' as an alternative to encrypt web traffic. They claim that certificates expire frequently and require complex automation to maintain. They also argue that the current system is flawed because certificates are issued over plaintext connections and trusted authorities use weak keys like '4'. The author proposes generating a vanity private key, such as '313333333337', to obtain a weak public key, which would go undetected unless someone attempts to break it. They provide an example of a protest certificate issued to 'maurycyz.com', which contains weak keys and uses the number '4'.
Read the full article at maurycyz.com →