Live data from Hacker News

Our First Certificate Is Now Live

letsencrypt.org

261–263 of 263 posts

Re: Our First Certificate Is Now Live

#261
post #259

Earlier quoted context omitted.

I'm curious, did you know you were taking to a moderator? (dang is on the HN staff: http://blog.ycombinator.com/meet-the-people-taking-over-hack... ) I'm asking because I'm wondering if it should be made more obvious that he is when he is posting in his moderation role.

Yes, I know who he is. Although I had a much older account, which password I couldn't recover, because it's from the days when no email was necessary here, I frequent HN for years and that's why I care about this community as I spend a significant portion of my life in here.

We can sometimes help people regain old accounts with no email address in them. If you still want it, you're welcome to email us (hn@ycombinator.com) with the username and we'll look into it.

Re: Our First Certificate Is Now Live

#262

Earlier quoted context omitted.

If it says "bankofamericaa.com" your alarm bells should start ringing. Even assuming the attacker can't get a certificate for the right country, how is the user expected to notice (and understand) the wrong country code if they can't notice the wrong domain name?

I'd argue it's at least simpler to notice since it's more readable - it has spaces between words.

Notice that by this point the claimed benefit of the EV cert has lost all connection to the validation process and is now solely an artifact of the impermissibility of spaces in host names.
Post reply on HN