Quick phishing demo. Would you fall for something like this?pic.twitter.com/phONMKHBle
Show this thread
-
A++++ would read/like/share/rt this tweet again We're now seeing supply-side attacks on software & repositories & spoofing/phishing domain attacks like this due in part to our heavy focus on encryption at the expense of the other elements of x509 PKI.
You guys are deluded if you think paid certificates were any harder to get. CAs were doing the exact same DV validation Let's Encrypt is. You think paying a few bucks for a DV cert was stopping phishers? Ha, no.
-
-
You can argue that we could use having other stronger validation models emphasized, but the fact of the matter is DV was *already* the bulk of certs issued by CAs, and Let's Encrypt didn't change that in any way. "Free certs are bad for security" is CA FUD.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.