no dogma podcast #180 Todd Gardner, CertKit, Part 1 - How Certificates Work
Summary
Todd Gardner joins me to discuss web certificates, their expiry and CertKit.
Details
Who he is, what he does. What a certificate is, updating one, out of date certs, outages. No certificate. Move to full https. Certificate transparency logs, public; wildcard certificates. RSA key compromised - can decrypt old traffic; perfect forward secrecy - may be able to decrypt a single session. Certificate authority, how they work with browsers; the price of certificates; free certificates from Let's Encrypt. Certificate lifetime reduction. Bygone SSL problem, domain ownership vs certificate ownership, man in the middle. Browsers forced certificate lifetime change; automation required. Who is impacted.
Full show notes
@toddhgardner.com
CertKit
Search Certificate Transparency Logs
The 47-Day Certificate Ultimatum: How Browsers Broke the CA Cartel