The Difference Between Root Certificate Authorities, Intermediates and Resellers(agwa.name)

71 points by agwa 3 years ago | 35 comments

The SSL Certificate Issuer Field Is a Lie(agwa.name)

65 points by pabs3 3 years ago | 6 comments

Ending TLS Client Authentication Certificate Support in 2026(letsencrypt.org)

43 points by pabs3 1 year ago | 27 comments

FastCGI: 30 years old and still the better protocol for reverse proxies(agwa.name)

398 points by agwa 6 months ago | 97 comments

Blog post by Andrew Ayer arguing that FastCGI, released 30 years ago, is a better proxy-to-backend protocol than HTTP because it avoids desync vulnerabilities.

Intent to end OCSP service(letsencrypt.org)

389 points by soheilpro 2 years ago | 133 comments

Let's Encrypt blog post announcing its intent to end OCSP support in favor of Certificate Revocation Lists, citing privacy risks of OCSP.

OCSP Service Has Reached End of Life(letsencrypt.org)

202 points by pfexec 1 year ago | 71 comments