HNHacker News
TopNewBestAskShowJobs

agwa

11,639 karma · joined July 31, 2011

Bootstrapped founder of SSLMate, where I make SSL certificates easier and do WebPKI and Certificate Transparency stuff: https://sslmate.com

Website: https://www.agwa.name

Email: andrew@agwa.name

submissionscomments

FastCGI: 30 years old and still the better protocol for reverse proxies

agwa.name·424 pts·agwa·
101

Why IP Address Certificates Are Dangerous and Usually Unnecessary

agwa.name·3 pts·agwa·
0

Google suspended my company's Google cloud account for the third time

agwa.name·416 pts·agwa·
192

A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises

words.filippo.io·13 pts·agwa·
2

The Randolph Public Telephone Operating Company

randtel.co·1 pts·agwa·
0

Tell HN: US companies must file a BOI report by Jan 1 to avoid fines and prison

8 pts·agwa·
1

A new path for Privacy Sandbox on the web

privacysandbox.com·108 pts·agwa·
66

AB 1637 requires all cities and counties to transition to a .gov domain

californiacitynews.org·41 pts·agwa·
35

Article 45 of eIDAS 2.0 will roll back web security by 12 years

eff.org·253 pts·agwa·
125

Last week's Let's Encrypt downtime

agwa.name·218 pts·agwa·
45

The Difference Between Root Certificate Authorities, Intermediates and Resellers

agwa.name·94 pts·agwa·
38

Spoofing vulnerability in Gmail's BIMI implementation

infosec.exchange·2 pts·agwa·
0

Websites Are Failing with ERR_CERTIFICATE_TRANSPARENCY_REQUIRED

sslmate.com·2 pts·agwa·
2

The SSL Certificate Issuer Field Is a Lie

agwa.name·8 pts·agwa·
1

SSH Key Injection in Google Cloud Compute Engine

blog.stazot.com·1 pts·agwa·
0

whoarethey: Determine Who Can Log in to an SSH Server

agwa.name·99 pts·agwa·
42

If your SSL certificate was issued in 2020 it may have stopped working in Chrome

twitter.com·12 pts·agwa·
2

Show HN: JavaScript widget to help your customers set up DNS records

dnshelper.com·4 pts·agwa·
1

Using SNI Proxying and IPv6 to Share Port 443 Between Webapps

agwa.name·16 pts·agwa·
4

CookieMonster: a tool for breaking stateless authentication

ian.sh·4 pts·agwa·
0

MarkMonitor left 60k domains for the taking

ian.sh·420 pts·agwa·
99

The latest version of Slack has a setting to disable the WYSIWYG editor

twitter.com·783 pts·agwa·
221

Mozilla to distrust PROCERT certificate authority

mail-archive.com·3 pts·agwa·
0

Chrome’s Plan to Distrust Symantec Certificates

security.googleblog.com·4 pts·agwa·
0

Show HN: CAA Record Generator

sslmate.com·11 pts·agwa·
1

Already on probation, Symantec issues more illegit HTTPS certificates

arstechnica.com·60 pts·agwa·
3

Incident Report – Certificates issued without proper domain validation

mail-archive.com·3 pts·agwa·
0

Update on transition of the Verizon roots and issuance of SHA1 certificates

mail-archive.com·1 pts·agwa·
0

How to Crash Systemd in One Command

agwa.name·224 pts·agwa·
184

WoSign Incidents Final Report [pdf]

wosign.com·4 pts·agwa·
0
Page 1 of 3Next →