BlackHat USA 2011: SSL And The Future Of Authenticity

Why HN readers recommended it

HN commenters repeatedly recommend it as the best explanation of why the CA system is broken and what alternatives exist.

This is a summary from the source dataset, not an endorsement by Hacker News or the video creator.

Video & recommendation details

Creator / channel

Christiaan008

Topic

ssl certificate authorities

Format

talk

Level

intermediate

HN recommenders in dataset

9

HN mentions in dataset

20

Recommendation years in dataset

2011–2017

These counts and years describe the included Hacker News records; they are not YouTube views or the video’s publication date.

From the original HN conversations

Excerpts from the recorded comments. Follow each source for the full comment and surrounding discussion.

• Moxie Marlinspike is the creator of Convergence. I highly recommend watching his Blackhat 2011 talk ( [VIDEO] ) covering authenticity on the web and Convergence.

• Yeah, I edited my list to include a CA-free encrypted replacement for TCP, just before I saw your comment. To all the super-geniuses reading this: burn your socialmobilelocal startup to the ground tomorrow and do this instead. Start by watching this Blackhat talk I linked …

• Businesses (and governments) can legitimately buy root keys that allow MITMing any SSL connection or they could just be a CA themselves (any CA can MITM the whole internet). Here's the best talk I know of this subject: BlackHat USA 2011: SSL And The Future …