Collaborate Disseminate
If I use the ACME protocol to generate Certificates and I use the TLS Challenge, is the DNS Server a critical part in the threat model?
Continue reading Does the DNS belong to the threat model in the ACME protocol with the TLS challenge
Let’s Encrypt has made an enormous difference to the landscape of the web. The protocol used for authenticating and receiving certificates, ACME, has spawned quite a few clients of various …read more Continue reading This Week in Security: ACME.sh, Leaking LEDs, and Android Apps
The ACME protocol defines the use of a replay nonce to prevent replay attacks.
I understand what replay attacks are and why it’s important to prevent them in certain scenarios. But I can’t think of a scenario where a replay attack would be… Continue reading Possible scenario for replay attack in acme protocol
In mixed Windows/Linux environments what’s the best practice for issuing server certificates?
If you use Windows MSCA PKI, you’re kind of stuck with using previous certificates to authenticate the renewals on non-domain machines using NDES… Continue reading What’s the best practice for server certificate issuance protocols in mixed environments?
Thanks to this flood of free certificates, the web is a lot more encrypted than it was a few years ago. Continue reading Let’s Encrypt issues one billionth free certificate
Anyone with even a passing familiarity with the classic animated shorts of the 1940s will recognize the traffic signal in the image above. Yes, such things actually existed in the real world, not just in the Looney world of [Bugs Bunny] et al. As sturdy as such devices were, they don’t last forever, though, which is why a restoration of this classic Acme traffic signal was necessary for a California museum. Yes, that Acme.
When you see a traffic signal from the early days of the automotive age like this one, it becomes quickly apparent how good the modern equivalent …read more
Continue reading Old Time Traffic Signal Revived with a Raspberry Pi Controller
A bug in GoDaddy’s domain validation process forced the registrar to revoke SSL certificates and reissue certs for more than 6,000 customers. Continue reading Buggy Domain Validation Forces GoDaddy to Revoke Certs