The author creates a 'protest certificate' for their website that uses a deliberately weak, vanity public key (prime 313333333337) to embed a visible encoded message into the certificate itself. This proves that certificate authorities fail to validate key strength, while still maintaining encrypted web traffic.
背景
该项目展示了证书颁发机构（如 Let's Encrypt）在颁发证书时未正确验证公钥密码强度问题，作者通过这种方式抗议 SSL/TLS 体系的复杂性和不安全性。
- 来源
- Lobsters
- 发布时间
- 2026年11月9日 20:55
- 评分
- 5.0 / 10