Let's Encrypt Changed the Internet (for Better and Worse)
Before 2015, HTTPS meant someone cared. After Let's Encrypt, HTTPS means the server exists. We got encryption everywhere and lost a trust signal nobody has replaced.
Blog
Protocols, security incidents, and how the internet actually works. 147 posts.
The Padlock Icon Should Be Removed from Browsers
The browser padlock creates false trust in hundreds of millions of users. HTTPS means encrypted, not safe. The icon should go.
The TLS Handshake in 7 Steps
Every HTTPS connection starts with a negotiation most developers never think about. Here's exactly what happens in TLS 1.3, step by step — and how the older TLS 1.2 handshake differs.
What Happens When a Root CA Gets Compromised
In 2011, DigiNotar was hacked and 500+ fraudulent certificates were issued, including *.google.com. The aftermath reshaped the entire PKI ecosystem.