3 ms·

Moxie of Signal has a great hilarious presentation on SSL at Def Con 19: https://www.youtube.com/watch?v=UawS3_iuHoA https://www.youtube.com/watch?v=UawS3_iuHo

• segfaultbuserr 6y ago
  Thanks for the link. Moxie's talk is better all the talkshows I've seen, absolutely hilarious, how could I miss this one before...
  • 1cvmask 6y ago
    Here is another great one where he ties American action movies as narrative with secure communications: https://www.youtube.com/watch?v=tOMiAeRwpPA https://www.youtube.com/watch?v=tOMiAeRwpPA
• tialaramex 6y ago
  That is a fun presentation, although the title is misleading because it's 99% about the Web PKI which is orthogonal to SSL (and TLS). TLS doesn't care at all why you trust these certificates, if you want to trust certificates so long as the public key contains the decimal digits 42069 that's fine. Even PKIX (the IETF's profile for X.509 on the Internet) is orthogonal to TLS as designed, although in practice you're creating a world of pain for yourself if you decide you do want TLS but you don't want PKIX since the two have grown next to each other for decades. Anyway, almost all of Moxie's talk is about the Certificate Authorities in the Web PKI, and not about SSL/TLS per se at all. It's about his attempt (Convergence) at multi-perspective peer validation for authenticity to eventually replace Certificate Authorities. Could that have worked? Maybe, sort of. It never went anywhere much. Of course in hindsight we can't blame Moxie for not guessing what will happen next - I expect few if any of us spent last Xmas thinking "Better enjoy this, next Xmas will be a totally different ball game because of a pandemic virus" either.