THE VIDEO SHELF · tls certificate authorities
DEF CON 19 - Moxie Marlinspike - SSL And The Future Of Authenticity
Moxie Marlinspike's DEF CON 19 talk on the weaknesses of SSL and the certificate authority system. He explains how CA trust became a problem and proposes an alternative that removes the CA oligopoly without reducing security.
Why HN readers recommended it
HN points to it as the classic overview of why TLS certificate trust is flawed, and it resurfaces whenever CA or HTTPS security comes up.
This is a summary from the source dataset, not an endorsement by Hacker News or the video creator.
Video & recommendation details
- Creator / channel
- DEFCONConference
- Topic
- tls certificate authorities
- Format
- talk
- Level
- intermediate
- HN recommenders in dataset
- 4
- HN mentions in dataset
- 8
- Recommendation years in dataset
- 2013–2026
These counts and years describe the included Hacker News records; they are not YouTube views or the video’s publication date.
From the original HN conversations
Excerpts from the recorded comments. Follow each source for the full comment and surrounding discussion.
"Often hear that the reason today’s Internet is not more secure is that the early designers failed to imagine that security could ever matter." Related to this, you should definitely watch Moxie Marlinspike's (lead dev of Signal) talk where he tells about his discussion with …
mashedvikings on Hacker News · 2018-04
In Mythology About SecurityI've found Moxie Marlinspike's talk [1] to be a great overview of these sorts of issues. IIRC, he built an alternate system discussed in the talk. But I believe that's defunct. (Tangent, anyone know the postmortem on that?) [VIDEO]
8organicbits on Hacker News · 2023-02
In Weakening TLS protection, South Korean styleMoxie has good points about the problems TLS has. And they are not about breaking TLS via cryptanalysis: [VIDEO]
maqp on Hacker News · 2019-11
In Encrypted web traffic now exceeds 90%
Summaries, classifications and recommendation records are from the HackerTube source dataset. Read about this library and its limitations.