Vai al contenuto principale

Commenti (9)

@tom7@mastodon.social ha, I didn't know you were on here. nice. I loved every minute of this. can't beat a good cheeky jab at security maximalism.

0

@tom7@mastodon.social the jokes in this video are just 😗👌

0

@tom7@mastodon.social i love the comment about the -o- option in curl

0

@tom7@mastodon.social very rebel thank you tom

0

@tom7@mastodon.social I work on certbot. This paper has caused me psychological distress. I immediately shared it with everyone I work with in any professional context.

0

@tom7@mastodon.social Argh, my eyes!!! Should've gotten an AI to help you with the title.

0

@tom7@mastodon.social I can't access your https-website using @librewolf@chaos.social :(

Error from librewolf

Secure Connection Failed

An error occurred during a connection to tom7.org. Peer attempted old style (potentially vulnerable) handshake.

Error code: SSL_ERROR_UNSAFE_NEGOTIATION
0

@tom7@mastodon.social
At first I thought you were over-reacting a bit with this video (I know the over-reaction is the joke, but still), who doesn't love Let's Encrypt?

But certificates also have downsides. Creating a TLS certificate puts your domain on a public list (CT logs), which invites hackers and scrapers to your site.

So even if you claim a name like ae0t6vnr73j7tq1t1s.org, if you want to use it without having to ignore the browser warning, you will have to deal with those other visitors too.

0