jaas

21 ms·

211.
by jaas 9y ago
More stringent validation methods won't help with the ever-present possibility of private key compromise. So long as that's a real possibility and revocation is broken (which it clearly is), longer certificate lifetimes are a liab
212.
by jaas 9y ago
Let's Encrypt doesn't directly produce any client software. ACME clients are built by our community and the community builds what they feel like building. If something hasn't been done yet, or isn't where you want it to
213.
by jaas 9y ago
> I doubt the web will ever be fully encrypted. There will always be tons of people who don't care enough. I don't think the Web will become fully encrypted by virtue of everyone caring enough to move to HTTPS. The knockout pun
214.
by jaas 9y ago
A discrete GPU is a GPU that's not on-die with the CPU. A discrete GPU is usually something you stick in a PCIe slot. A GPU on the CPU die, non-discrete, is often referred to as an "integrated GPU" or "integrated graphic
215.
by jaas 9y ago
Let's Encrypt | Systems Administrator | Remote | Full Time Let’s Encrypt is a free, automated, and open Certificate Authority. https://letsencrypt.org/jobs/
216.
by jaas 9y ago
Supplying an email address to Let's Encrypt is optional.
217.
ACME Support in Apache HTTP Server Project(letsencrypt.org)
230 points by jaas 9y ago|75 comments
218.
by jaas 9y ago
The fundamental problem with the legacy Firefox extension API is that its incredible power comes from putting incredible constraints on Firefox internals. Every stable API commitment involves some constraints, but the constraints from legac
219.
by jaas 9y ago
The entire defense/post boils down to this line: "... I ought to be more concerned with where the trend in memory is going rather than where it has been." The problem with this line of argument is that it never ends. Develope
220.
by jaas 9y ago
I've used these challenges in a few different contexts, they're great. I taught myself rust by implementing solutions to these challenges, and I taught a CS class in which I had students improve their C language skills by implemen
221.
by jaas 9y ago
This is a bit long, but I know the answer in detail because I'm the one who originally wrote to code to make 32-bit plugins work in 64-bit Firefox on OS X :) I'll never forget the moment I first got a YouTube video to play properl
222.
by jaas 9y ago
IIRC, in the case of Firefox the problem was not porting Firefox itself to 64-bit. That was done a long time ago. The problem was all of the 32-bit dependencies people had installed. For example - if a user only had 32-bit Flash installed a
223.
by jaas 9y ago
Publishing private keys is a violation of the Let's Encrypt terms of service. We are revoking these certificates. https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016...
224.
by jaas 9y ago
"LetsEncrypt issues SSL certificates by automatically verifying that you have ownership of the domain you claim you have." Let's Encrypt does not verify ownership of domains. We verify control. This is a common mistake, but t
225.
by jaas 9y ago
So your argument is that because rust doesn't solve all problems people shouldn't strongly consider replacing C code with it, even though rust avoids entire classes of critical bug types in C? I happen to like rust, though I would
226.
by jaas 9y ago
You won't have confidence that your visitors see the content you serve as you intend because it can be modified in transit. Your visitors will be broadcasting at least the exact address of the pages they read on your blog, and are vuln
227.
by jaas 9y ago
Currently we're only planning to allow DNS method validation for wildcards. You'll have to validate the base domain via DNS, that's all. No HTTP or file-based validation option. We decided not to offer HTTP-based (file-based)
228.
by jaas 9y ago
I don't really understand what you're implying but here's some information that might help. Let's Encrypt is a non-profit service and we don't use your data for our benefit. We work hard to collect and retain as lit
229.
Let's Encrypt Milestone: 100M Certificates Issued(letsencrypt.org)
5 points by jaas 9y ago|1 comments
230.
by jaas 9y ago
Yes
231.
by jaas 9y ago
Josh from Let's Encrypt here. First, my apologies for the trouble this has caused. I want to offer people here an early root cause analysis. I say early because we have not entirely completed our investigation or a post-mortem. OCSP re
232.
by jaas 9y ago
Good news. Now they should add ACME support directly to nginx so it can get and manage TLS certificates seamlessly for you.
233.
by jaas 10y ago
TLDR: Look at the IdenTrust numbers if you want to know the real Let's Encrypt numbers. Not many people use Let's Encrypt's own root for their validation chain when they use Let's Encrypt certificates. The Let's Enc
234.
by jaas 10y ago
I did a lot of work on Firefox's NPAPI implementation over the past decade. Improving that code was rewarding in that it had very tangible benefits for Firefox users but it was pretty clear that improving Firefox's code was only g
235.
by jaas 10y ago
Head of Let's Encrypt here. Our team is looking into this and so far we don't see any evidence of mis-issuance in our logs. It looks like the domain in question, 'apple-id-2.com', was registered and DNS resolved for it s
236.
by jaas 10y ago
Let's Encrypt | Systems Administrator | US and Canada | Remote We are a free, open, and automated certificate authority. Our goal is to help create a more secure and privacy-respecting Web by driving adoption of HTTPS. We're curre
237.
by jaas 10y ago
I'd like to thank Etsy for writing this article. Let's Encrypt's availability makes large deployments easier, but they're still not actually all that easy to pull off in many cases. It takes a lot of thought and work to
238.
by jaas 10y ago
Head of Let's Encrypt here. They did, but did not mention it in the article.
239.
by jaas 10y ago
HTTPS is very much for the site owner's benefit as well. If your site is not HTTPS then you can't be sure that your users are seeing what you intend them to see. Ads, malicious script, whatever, can be injected or replace your con
240.
by jaas 10y ago
"A hardware platform only solves half the problem that most purchasers of HSMs and smart cards are asking vendors to solve." A hardware platform alone solves less than half the problem for many HSM buyers, myself included. There&#

More ›