Timeline for What differentiates a CA cert from a server cert?
Current License: CC BY-SA 4.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 2, 2023 at 19:07 | comment | added | Seth | FYI, cleaner link to the same blog post mti2935 linked to at the end of his answer above, containing a copy of Moxie's paper: blog.naver.com/satang50/127326956 | |
| Sep 7, 2022 at 15:05 | vote | accept | A_P | ||
| May 13, 2021 at 23:07 | comment | added | mti2935 | Thanks CB. That's a great reference. I also found a copy of Moxie's paper on another site, and edited my answer to include a link to that site. | |
| May 13, 2021 at 23:03 | history | edited | mti2935 | CC BY-SA 4.0 |
added 185 characters in body
|
| May 13, 2021 at 20:59 | comment | added | CBHacking | Unfortunately it looks like Moxie excluded thoughtcrime.org from the Wayback Machine. However, you can read his BlackHat/DEFCON 2009 slide deck on the topic here: blackhat.com/presentations/bh-dc-09/Marlinspike/… | |
| May 13, 2021 at 20:54 | comment | added | mti2935 |
@EsaJokinen, Yes, it does indeed. That's unfortunate, because it was a very influential paper. It lead to Moxie releasing sslsniff, and it also forced the browser makers to fix the vulnerability. That same URL is also linked from the Wikipedia page about Moxie at en.wikipedia.org/wiki/Moxie_Marlinspike#cite_note-29 and many other pages on the web as well. I tried to find an archived version of the page in archive.org, but no luck there either. If anyone reading this can find a link to this paper, please post it.
|
|
| May 13, 2021 at 20:42 | comment | added | Esa Jokinen | The last link seems broken. | |
| May 13, 2021 at 20:41 | comment | added | A_P | Thank you! Now that I know about "basic constraints," I can mark my question as a duplicate actually! | |
| May 13, 2021 at 20:33 | history | answered | mti2935 | CC BY-SA 4.0 |