HNHacker News
TopNewBestAskShowJobs

ivanr

1,825 karma · joined July 24, 2010

I write books and build things. Mostly related to computer security. Here are some things that may be of interest:

- My book Bulletproof TLS and PKI (https://www.feistyduck.com/books/bulletproof-tls-and-pki/) provides a comprehensive and practical coverage of SSL/TLS and PKI. The second edition was released in January 2022.

- I also maintain the free OpenSSL Cookbook, which focuses on command-line usage: https://www.feistyduck.com/books/openssl-cookbook/

- My startup Hardenize https://www.hardenize.com (now acquired by Red Sift) aims to help everyone deploy modern security standards by providing free assessments to everyone.

Previously, I built SSL Labs. Before that, ModSecurity.

[ my public key: https://keybase.io/ivanr; my proof: https://keybase.io/ivanr/sigs/LiVhyast_FE7MnLvqIDRD7yl-KGXtrEaGfBUX-K_6D0 ]

submissionscomments

Show HN: Feisty Duck's Cryptography and Security News Aggregator

feistyduck.com·5 pts·ivanr·
1

State of the post-quantum Internet in 2025

blog.cloudflare.com·4 pts·ivanr·
0

Show HN: My Book Bulletproof TLS and PKI (Second Edition) Is Out

feistyduck.com·134 pts·ivanr·
34

Introducing MTA Strict Transport Security (MTA-STS)

hardenize.com·2 pts·ivanr·
0

Monitoring deprecated Symantec certificates

hardenize.com·1 pts·ivanr·
0

On the Usability of Deploying HTTPS [pdf]

sba-research.org·28 pts·ivanr·
6

SSL/TLS and PKI Timeline: Detailed History of Events

feistyduck.com·4 pts·ivanr·
0

How Bulletproof SSL and TLS is a living book

blog.ivanristic.com·4 pts·ivanr·
0

State Machine Attacks against TLS

smacktls.com·19 pts·ivanr·
0

Attack of the week: FREAK (or 'factoring the NSA for fun and profit')

blog.cryptographyengineering.com·197 pts·ivanr·
41

Show HN: OpenSSL Cookbook 2nd Edition

feistyduck.com·57 pts·ivanr·
6

Uphold the VAT Exemption Threshold for businesses supplying digital products

change.org·9 pts·ivanr·
1

Book Review: Bulletproof SSL and TLS

virusbtn.com·1 pts·ivanr·
0

AWS Key Management Service

aws.amazon.com·4 pts·ivanr·
0

SSL Labs 1.10.31, with SHA1 warnings, is now live

ssllabs.com·2 pts·ivanr·
1

Gradually sunsetting SHA-1

googleonlinesecurity.blogspot.com·146 pts·ivanr·
98

SSL/TLS capabilities of 30+ widely used browsers and devices

dev.ssllabs.com·4 pts·ivanr·
0

HTTPS mixed content: still the easiest way to break SSL

blog.ivanristic.com·5 pts·ivanr·
0

Significant SSL/TLS improvements in Java 8

blog.ivanristic.com·8 pts·ivanr·
0

SSL Labs: Stricter security requirements for 2014

blog.ivanristic.com·103 pts·ivanr·
56

MinimaLT: Encrypted network protocol as fast as TCP/IP

ethos-os.org·2 pts·ivanr·
0

Tcpcrypt: opportunistic encryption proposal for TCP (2011)

tcpcrypt.org·1 pts·ivanr·
0

OpenSSL Cookbook v1.1 (free ebook)

feistyduck.com·2 pts·ivanr·
0

SSL/TLS Deployment Best Practices v1.3

ssllabs.com·152 pts·ivanr·
37

SSL/TLS Deployment Best Practices

ssllabs.com·6 pts·ivanr·
0