4 ms·
To clarify: DO NOT DO THIS. 1. Never give your private key to anyone 2. Especially not if it is sent over an unencrypted connection (the site doesn't even use
by chmod775 13y ago
To clarify: DO NOT DO THIS.
1. Never give your private key to anyone
2. Especially not if it is sent over an unencrypted connection (the site doesn't even use https)
3. Don't. Just don't.
This is either the weakest attempt of the NSA to collect private SSL keys ever, or this company actually has zero knowledge of the product they're selling and shouldn't be trusted with your site's security
- namuol 13y agoI love how suddenly the NSA is the only entity out there who has an interest in private keys.
- blueblob 13y agoI think it is pretty hard to argue that they are not one of the most aggressive entities doing this.
- nraynaud 13y agoat least we know that's it is the most interested, funded and staffed to do it.
- ZirconCode 13y agoNo, they're just the only ones dumb enough to get caught ;)
- l34ch 13y agoNo they just had a stupid rat.
- makmanalp 13y agoNever attribute to malice that which is adequately explained by stupidity. This just seems like some newbie programmer was like "hey, wouldn't it be cool if"... and built themselves a weekend project that they released on the site. Obviously it's terrible for a site that sells SSL stuff, but concluding that this is the NSA is pretty hugely premature. edit: Duh, didn't pick up on the sarcasm. In my defense, the parent text was way more vague at the time. :)
- floobynewb 13y agoTo be fair, I'm pretty sure he had his tongue firmly in his cheek. But point well made. Whenever this point comes up I think of a scene from 'the cube', is it a massive conspiracy or utter incompetence combined with some kind emergent process?
- 0xdeadbeefbabe 13y agoOr likely the NSA firmly has their tongue in their cheek teasing and scaring us because they can.
- ddoolin 13y agoNobody else got the subtle sarcasm, but I did. No worries, man. But seriously, if it was the NSA, I like how quick everyone is to dismiss the notion!
- ceautery 13y agoThere are thousands of us who see the subtle implications of comments, and roll our collective eyes at the knee-jerk, replies from people who missed it. The proclivity for this type of boring, predictable reply is the main reason I don't post very much. I tend to get the "you are either stupid or a jerk!!" replies myself. (Rest assured, it's the latter, not the former.)