@a_z_e_t @BRIAN_____ A Sub-CA is like a normal CA where somebody indicated he believes your lies.
With a normal CA you lie to yourself.
-
-
Replying to @TheSecurityFail
@TheSecurityFail@BRIAN_____ well they said 'name restricted'.2 replies 0 retweets 0 likes -
Replying to @a_z_e_t
@a_z_e_t@BRIAN_____ The thing about Honest Achmed was not that you MAY as well trust him, but it showed that you SHOULD NOT all the others.1 reply 0 retweets 0 likes -
Replying to @TheSecurityFail
@TheSecurityFail@BRIAN_____ well. I said I'm for less CAs, right? if there's a proper process for name-restricted subs, maybe.2 replies 0 retweets 0 likes -
Replying to @a_z_e_t
@a_z_e_t@TheSecurityFail If my sub-CA cert is constrained to .briansmith.org then I'm not really yet another CA. More like a wildcard.1 reply 0 retweets 1 like -
Replying to @BRIAN_____
@BRIAN_____@TheSecurityFail yep, I agree there. but does it work for software outside the browser world? X.509 extension are widely ignored2 replies 0 retweets 0 likes -
Replying to @a_z_e_t
@a_z_e_t@TheSecurityFail It's time to stop caring about that old software and move on. I've given everyone free code & tests & more for NC.1 reply 0 retweets 1 like -
Replying to @BRIAN_____
@BRIAN_____@TheSecurityFail SMTP MTA MITM is no joke. this is an issue. real world. and exploited widely. not everything is www.1 reply 0 retweets 0 likes -
Replying to @a_z_e_t
@BRIAN_____@TheSecurityFail there're three competeing papers proving this.@ralphholz et al.@zakirbpd and my crew:@Fr333k@WilfriedMayer1 reply 0 retweets 0 likes -
Replying to @a_z_e_t
@BRIAN_____@TheSecurityFail@ralphholz@zakirbpd@Fr333k@WilfriedMayer most useful for MSA/MDA though.1 reply 0 retweets 0 likes
@a_z_e_t @TheSecurityFail @ralphholz @zakirbpd @Fr333k @WilfriedMayer
We deploy shit X.509 code → We avoid NC → We keep shit code → We lose
-
-
Replying to @BRIAN_____
@BRIAN_____@TheSecurityFail@ralphholz@zakirbpd@Fr333k@WilfriedMayer sure but mail code stays around for a looong time,..1 reply 0 retweets 0 likes -
Replying to @a_z_e_t
@BRIAN_____@TheSecurityFail@ralphholz@zakirbpd@Fr333k@WilfriedMayer also MUAs don't auto-upgrade like some browsers0 replies 0 retweets 0 likes
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.