hackertube.io

BlackHat USA 2011: SSL And The Future Of Authenticity

Christiaan008 · talk · Watch on YouTube

CryptographySecurity & hacking

What it is

Moxie Marlinspike's BlackHat 2011 talk examines weaknesses of SSL and the certificate authority system and proposes Convergence, a decentralized notary approach with trust agility.

Why Hacker News recommends it

HN commenters repeatedly recommend it as the best explanation of why the CA system is broken and what alternatives exist.

  • 9 people recommended it
  • 7 different months
  • 4 strong recommendations
  • first 2011, last 2017

What HN commenters said

  1. “I highly recommend watching his Blackhat 2011 talk”

    Moxie Marlinspike on web authenticity and Convergence.

    jtdowney, 2011-09 · Strong recommendation · in “Convergence, distributed, secure strategy replacing certificate authorities”

  2. “Start by watching this Blackhat talk I linked elsewhere in the thread, the guy has the right kind of ideas”

    Talk with the right ideas for CA-free encryption.

    JonnieCache, 2011-11 · Strong recommendation · in “US judge orders hundreds of sites "de-indexed" from Google, Facebook”

  3. “best talk I know of this subject”

    Best talk on CA trust and MITM problems.

    4ad, 2012-06 · Strong recommendation · in “Setting out plans to monitor all Internet use in the UK”

  4. “it does a great job at explaining”

    Explains the CA problem and how Convergence helps.

    rakoo, 2013-11 · Strong recommendation · in “Moving forward on improving HTTP's security”

  5. “quite an interesting discussion on the issue.”

    Discusses the Comodo attack and CA problems.

    jvc26, 2011-09 · Recommendation · in “Diginotar and Comodo hacker the same guy and claims to have owned 4 other CAs”

  6. “A great talk from last DefCon”

    Great security talk relevant to SSL trust problems.

    alecco, 2011-11 · Recommendation · in “The Sovereign Keys Project”

  7. “The 2011 BlackHat video[3] and blog post[2] by Moxie Marlinspike are great sources of information.”

    Great source on certificate system problems and alternatives.

    jcase, 2013-01 · Recommendation · in “Enhancing digital certificate security (Fake *.Google.com cert issued)”

  8. “is a good watch for those unfamiliar with the idea”

    Introduces Convergence as a replacement for CAs.

    glass-, 2015-10 · Recommendation · in “Sustaining Digital Certificate Security”

Excerpts from Hacker News comments, linked to the originals. Summaries and labels were written by a language model from those comments.

Topics: moxie marlinspike, convergence, certificate authorities, mitm, tls, trust agility

Also recommended by the same people