Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #25090

C

Carbonwind.net

Personal blog · carbonwind.net/blogsecurityprogramming

Carbonwind.net is a personal blog at carbonwind.net about security and programming. Since 2010, 3 different Hacker News readers have linked it 4 times. It is still writing: the last post was on 2026-02-16, and you can follow it by feed.

Visit the blog
4mentions?
3HN people?
2010–2013first – last linked?
Links on Hacker News per year · peak 2 in 2010

Too few sampled comments (2) to say how often HN recommends it.?

Why HN links it

HN readers link this blog for posts on SSL/TLS tuning, including a look at cipher suite support across browsers and a benchmark of browser cipher and TLS version support. Also cited on TLS man-in-the-middle certificate swapping.

Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

What Hacker News says?

  1. A brief search for TLS MITM suggests to my inexperienced eye that there are indeed TLS attacks via MITM cert-swapping that the ISP can assert. --- edit. Not looking for argument. Looking for facts. - This is my top hit for 'tls mitm proxy' http://www.delegate.org/delegate/mitm/ It's dated as '06, however. - I can install Fiddler (Windows https debugger) on my machine and read https traffic in the clear. - A competen…

    Comment linking /blog/post/Random-SSLTLS-101%E2%80%93SSLTLS-version-rollbacks-and-browsers.aspx

    on “Gmail.com being MITM'd by Iran using this certificate”
  2. Submitted Chrome 4 Beta on Mac OS X: Anon and NULL encryption cipher suites as a story · 2 points

    HN discussion
  3. You're right, I forgot the honor cipher directive. According to http://www.carbonwind.net/blog/post/A-quick-look-over-some-b... RC4+RSA is supported nearly everywhere, but it was not tested on mobile browsers. As part of my researches on SSL tuning, I'll do a benchmark of all browsers, for cipher suites and TLS versions support.

    Comment linking /blog/post/A-quick-look-over-some-browsers-and-their-SSLTLS-implementations.aspx

    on “Tips to accelerate SSL”
  4. Submitted Firefox Extension download process and the mess within as a story · 1 points

    HN discussion

Search all of HN for carbonwind.net