Tessera
Folgen

Matt M

@mattm.bsky.social

36 Posts339 Follower238 Folgt
Matt M@mattm.bsky.social · 4mo ago

Have you ever needed to make sure your website has an expired or revoked certificate? No, that's not a problem people have. But we do, because CAs have to run test sites with them. I wrote a post post about this problem, and the tool that we use to host ours: letsencrypt.org/2026/04/10/t...

The difficulty of making sure your website is broken

Have you ever needed to make sure your website has a broken certificate? While many tools exist to help run an HTTPS server with valid certificates, there aren’t tools to make sure your certificate is revoked or expired. This is not a problem most people have. Tools to help manage certificates are always focused on avoiding those problems, not creating them. Let’s Encrypt is a Certificate Authority, and so we have unusual problems we need to solve.

letsencrypt.org

yomna@rival-elf.bsky.social · 3y ago

people are always talking about a hypothetical technologically advanced alien race ... but I always wonder, if they exist, do they also have to deal with PKI?

Dirkjan Ochtman@djc.ochtman.nl · 8mo ago

Earlier this year, LWN.net featured an excellent article named "Linux's missing CRL infrastructure", and today Canonical announced it will be working with me and @jbp.io over the coming weeks to start bridging the PKI infrastructure gap. discourse.ubuntu.com/t/addressing...

Addressing Linux's Missing PKI Infrastructure

Earlier this year, LWN featured an excellent article titled “Linux’s missing CRL infrastructure”. The article highlighted a number of key issues surrounding traditional Public Key Infrastructure (PKI)...

discourse.ubuntu.com

Matt M@mattm.bsky.social · last yr.

Firefox's telemetry has data on how many times a CA is used to successfully validate certificates. This is a pretty good measure for how "big" a CA is. The data is hard to view in Mozilla's site, so I've made a script to combine a few data sources and graph it! github.com/mcpherrinm/c...

Bar chart showing the largest CAs in Firefox's telemetry are Google, Digicert, ISRG, AWS, Entrust, Sectigo, Globalsign, and Godaddy. Other entries are all much smaller.
apenwarr@apenwarr.ca · last yr.

Customers: We want a faster horse Henry Ford: Ah. In fact— Kubernetes: Let me stop you right there. What you really need is 1000 horses that die randomly

Mike Sowden@mikeachim.bsky.social · last yr.

OK, this is wild. In September 2023, geophysicists across the world started monitoring a very odd signal coming from the ground under them. It was picked up in the Arctic. And Antarctica. It was detected everywhere, every 90 seconds, as regular as a metronome, for *nine days*. What the HELL? 1/

Unsplash image of the Earth, mostly the nightside with a tracery of city lights on every continent.
James McLeod@jamespmcleod.ca · last yr.

A lot of Americans don't know this, but the winner of the Canadian election will be required live in a small cottage located in the backyard of the palace where the viceroy to the King of England lives. The cottage just recently got a new wifi router, which was very exciting for all Canadians.

Acyn@acyn.bsky.social · 2y ago

Canadian MP Charlie Angus: Our beloved Canada is under threat. The threat comes from the president of the US—a convicted felon and known predator. But the threat is also being driven by the hate algorithms of oligarchs like Elon Musk….

Brendan Dawe@dawe.bsky.social · 2y ago

I hear that the Ontario Government is directing Metrolinx to start investigating 'the massing link' and if it actually amounts to anything is quite impactful project for Toronto region passenger and freight

Hydro-Québec@hydroquebec.com · 2y ago

La Côte-Nord a connu des conditions météorologiques extrêmes ces dernières semaines. Environ 75 mm de verglas se sont accumulés sur nos lignes de transport à certains endroits et nous avons dû y dépêcher des équipes rapidement afin de déglacer les lignes.

nolen@itseieio.bsky.social · 2y ago

how do you all remember every UUID? I find it really hard. so I wrote them all down on every uuid dot com the list has fast search across all 2^122 values (so you can find your favorites) - hoping to add some social features like "trending UUIDs" soon!

Ken Shirriff@righto.com · 2y ago

Intel launched the Pentium processor in 1993. Unfortunately, dividing sometimes gave a slightly wrong answer, the famous FDIV bug. Replacing the faulty chips cost Intel $475 million. I reverse-engineered the circuitry and can explain the bug. 1/9

A die photo of the Pentium processor with the main functional blocks labeled including the caches, instruction fetch and decode, integer execution, and floating point. The image consists of complex patterns of rectangular regions in reddish and brownish colors. The image zooms in on a small part of the floating point unit giving a detail of an adder and PLA circuit.
Matt M@mattm.bsky.social · 2y ago

Do you use Let's Encrypt certificates? Do you use the "client auth" extended key usage with them? (I.E: Do you use Let's Encrypt as a client certificate). Chrome's root program is looking to phase out its use in roots they trust. I'd love to hear from anyone who would be affected.

Ed Conway@edconway.bsky.social · 2y ago

🧵SALT🧵 It's been snowing in the UK and the road gritters are out in force, begging the question: Have you ever wondered where that grit actually COMES from? The answer is more magical, beautiful and fascinating than you probably realised. 1/14

Bild