Hacker News Reader

Comment by mstachowiak | Hacker News Reader

Can't help but find it ironic the winner of the 2018 Levchin Prize for Advancements in Real-World Cryptography has an invalid SSL certificate on his research website.

View on HN

Also the levchinprize.com website. (not that there is a link to it; and it might not even attempt to do ssl)

   levchinprize.com uses an unsupported protocol.
   ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Classic.

At first glance they do support SSL, but not TLS; basically your browser laughed at their antiquated protocol.

A few hours ago, I went to their website after seeing the submission, and it worked. Now I'm getting SSL_ERROR_NO_CYPHER_OVERLAP (in Firefox 57). Maybe they're loadbalancing and one of the servers is incorrectly configured?

I can't help but finding it sad that the prize is a meager 10K, especially for projects that are so relevant for the Internet at large.

Security, in any organization, is always last on the budget list. Perhaps this is reflected in the prize.

I did think the same thing, but you can't blame that on him. Blame IBM/Akamai.

It is on Akamai but it is on Akamai's non-TLS network (ie .egsuite.net)...you have to pay more for TLS on Akamai (.edgekey.net)....I'd blame IBM but not Akamai.

You can. Responsibility for their choice of business partners lies with them, not the public. Otherwise this blame-game-treasure-hunt-rigmarole never ends.

It doesn’t matter that much, but it’s a matter of principle.

Reply on news.ycombinator.com