RSA Certificate Map | Hacker News Reader

RSA Certificate Map

indutny.github.io

35 pointsindutny15 comments

What's going on with italy short public and long private, an outlier for both in europe.

I'd guess they're using subkeys...

I have investigated this thing and it looks like there are lots of certificates issued by `Vodafone (Secure Networks)` for the hosts like https://vox2365476.mynet.vodafone.it/main.cgi?page=index.htm...

At first, I was really confused because normally land masses are a brighter color than oceans. The colors should probably be inverted so that land has a color with detail and the ocean is all black to make it easier to parse which is which.

Pretty cool though!

Pull requests are welcome ;)

"Public" and "Private" denotes if its an internal/external server?

Keys are generated in pairs. The public key is a key you can safely share. Other users encrypt data with your public key, this data can only be decrypted with your private key. Private keys should be stored locally and securely.

Yes I am aware of key pairs. But my understanding is that RSA key pairs are often (and unless im mistaken, required to be) the same number of bits.

Generally yes, but subkeys can differ in length. I'm not sure if RSA supports subkeys but that's my initial thought.

But why are the private keys so much shorter?

They aren't. Not to be rude, but aosmith is almost certainly wrong about what "Public/Private" means in this context.

I have never seen a situation where the public and private key vary in length like that. It would also make no sense for the Private Key to be half the size as that key controls decryption and is the more important one to secure (and therefore be higher bit).

Public are the certs that can't be used for signing stuff, private are basically self-signed certificates (with some percent of error due to the way of detection).

Thats what I originally assumed. Self-signed is not regulated and therefore was not coerced into the 2048-bit key transition.

I wished this worked better in mobile, looks pretty slick!

Go Boston!

Reply on news.ycombinator.com