4 ms·

The website for the most secure coin in the world only gets a B rating from ssllabs: https://www.ssllabs.com/ssltest/analyze.html?d=www.thenewpoundcoin.com http

by comice 10y ago

The website for the most secure coin in the world only gets a B rating from ssllabs: https://www.ssllabs.com/ssltest/analyze.html?d=www.thenewpoundcoin.com https://www.ssllabs.com/ssltest/analyze.html?d=www.thenewpou...

imron 10y ago
It's ok, the coin will only connect to websites over an ethernet connection, and will only load a particular site if it can validate the full certificate chain.
- kregasaurusrex 10y ago
  A sufficiently crafted coin would be an interesting attack vector against a vending machine, for example. I'm interested to see how counterfeiters would be able to use a passive/active security device within the coin for potential gain.
xiphias 10y ago
I just checked bitcoin.org as a comparision (A+): https://www.ssllabs.com/ssltest/analyze.html?d=bitcoin.org https://www.ssllabs.com/ssltest/analyze.html?d=bitcoin.org
- ForHackernews 10y ago
  If only bitcoin exchanges were actually secure...
- corobo 10y ago
  Big surprise the downloads-provided primarily online currency has better online security than the single page landing site of a primarily physical currency.
corney91 10y ago
It looks like the only problem is they've missed off the GoDaddy intermediate certificate (which presumably most users will have cached from other sites). Funny how all the more complicated things like ciphers are considered well-configured but something simple like this is missed, but I guess it's an easy mistake to make (if you're not checking ssllabs) depending on how the certificates have been supplied by the vendor.
dx034 10y ago
Our government has said yesterday that encryption is bad and helps terrorists. So why should they use it for websites?
ardaozkal 10y ago
A friend failed opening it at all (while I can open it in FF51) and clicking it directly from discord gave tons of SSL issues (screenshotted here: https://s.ave.zone/556.png https://s.ave.zone/556.png ). Yeaah, pretty secure, I guess.

by comice 10y ago

imron 10y ago

It's ok, the coin will only connect to websites over an ethernet connection, and will only load a particular site if it can validate the full certificate chain.

kregasaurusrex 10y ago
A sufficiently crafted coin would be an interesting attack vector against a vending machine, for example. I'm interested to see how counterfeiters would be able to use a passive/active security device within the coin for potential gain.

xiphias 10y ago

I just checked bitcoin.org as a comparision (A+): https://www.ssllabs.com/ssltest/analyze.html?d=bitcoin.org https://www.ssllabs.com/ssltest/analyze.html?d=bitcoin.org

ForHackernews 10y ago
If only bitcoin exchanges were actually secure...
corobo 10y ago
Big surprise the downloads-provided primarily online currency has better online security than the single page landing site of a primarily physical currency.

corney91 10y ago

It looks like the only problem is they've missed off the GoDaddy intermediate certificate (which presumably most users will have cached from other sites). Funny how all the more complicated things like ciphers are considered well-configured but something simple like this is missed, but I guess it's an easy mistake to make (if you're not checking ssllabs) depending on how the certificates have been supplied by the vendor.

dx034 10y ago

Our government has said yesterday that encryption is bad and helps terrorists. So why should they use it for websites?

ardaozkal 10y ago

A friend failed opening it at all (while I can open it in FF51) and clicking it directly from discord gave tons of SSL issues (screenshotted here: https://s.ave.zone/556.png https://s.ave.zone/556.png ). Yeaah, pretty secure, I guess.