Top all-time · #22200
duckpond.ch
Personal blog · duckpond.ch · on HN as Entesecuritysystems
duckpond.ch is a personal blog at duckpond.ch about security and systems. Since 2016, 3 different Hacker News readers have linked it 12 times, most often “Xt_sslpin: match SSL/TLS certificate finger prints at the netfilter level”. It is still writing: the last post was on 2026-01-24, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link this post on xt_sslpin, a Linux netfilter module that adds certificate pinning. One commenter cites it as a companion to the Windows 10 undocumented pinning thread.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Deep dive tech blog with ducks
Most-linked posts?
- Xt_sslpin: match SSL/TLS certificate finger prints at the netfilter level2 people · 2 mentions · first linked 2016-09-09
- ReMarkable: Scripts, NixOS derivations and lessons learned2 people · 2 mentions · first linked 2020-01-08
What Hacker News says?
An attempt to do something similar with netfilter/Linux: https://github.com/fredburger/xt_sslpin Recent fork: https://github.com/Enteee/xt_sslpin Someone's blog post about it: https://duckpond.ch/networking/security/2016/09/09/xt_sslpin... /r/netsec discussion: https://www.reddit.com/r/netsec/comments/52me9w/xt_sslpin_ma... I like the idea.
Comment linking /networking/security/2016/09/09/xt_sslpin.html
on “Windows 10 has an undocumented certificate pinning feature”Submitted Types for PlantUML: Parsing PlantUML with TypeScript in a few simple steps as a story · 3 points
HN discussionSubmitted ReMarkable: Scripts, NixOS derivations and lessons learned as a story · 3 points
HN discussionSubmitted Count Beta Release – An OSS Counting App with Ionic as a story · 2 points
HN discussionSubmitted Udev Rule Script Template as a story · 2 points
HN discussionSubmitted Git-submodule-url-rewrite: Migrate a Git Repository with Submodules as a story · 2 points
HN discussionSubmitted Show HN: Broken One-time pad 2 as a story · 2 points
HN discussionSubmitted Xt_sslpin: match SSL/TLS certificate finger prints at the netfilter level as a story · 2 points
HN discussionSubmitted Remarkable (2020) as a story · 1 points
HN discussionSubmitted Disable ReMarkable Touchscreen with Evkill as a story · 1 points
HN discussionSubmitted Tofu for Containers: Running containers behind a HTTPS scanning proxy as a story · 1 points
HN discussionSubmitted Broken One-time pad: Let's implement crypto and break it as a story · 1 points
HN discussion