Top all-time · #25503
Hubert Chathi
Personal blog · uhoreg.ca/blogprogrammingsecurity
Hubert Chathi writes Hubert's blog, a personal blog at uhoreg.ca about programming and security. Since 2016, 3 different Hacker News readers have linked it 7 times. The last post was in 2019, but the archive is still widely read.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link Hubert Chathi's posts on Matrix end-to-end encryption being opt-in per room during beta, and a HOWTO for Let's Encrypt certificates on nginx using acme-tiny on Debian-based systems.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- /blog/20170910-21102 people · 2 mentions · first linked 2018-12-22
What Hacker News says?
So E2EE key management has been a (very) long time coming in Matrix. Firstly: E2EE is pretty useless if you don't verify the identity of keys, as you could be just talking to a MITM (e.g. a malicious server admin could add a 'ghost' device onto your account in order to sniff the messages people are sending you). Originally (in 2016) we let users verify the devices they're talking to by checking their Curve25519 publ…
Comment linking /blog/20190514-1146
on “Proof of concept: end-to-end encryption in Jitsi Meet”Submitted How secure is emoji-based key verification in Matrix? as a story · 1 points
HN discussionMatrix E2E encryption is opt-in per room while its support is in beta, with the intent to have on by default when it's out. https://www.uhoreg.ca/blog/20170910-2110
Comment linking /blog/20170910-2110
on “An Apology and an Update”https://www.uhoreg.ca/programming/matrix/polyjuice is closest
Comment linking /programming/matrix/polyjuice
on “How I fell in love with Erlang”you're right that that's the slow bit (typically about 50ms to set up each channel, so across 1000 devices that's 5s to establish the initial mesh), but the important thing is that having established the channels, they are only used to sync key data for the megolm layer which sits on top. megolm keys typically rotate every 100 messages or every day (whichever comes first), and this uses the existing olm channels. In…
Comment linking /blog/20170910-2110
on “Matrix 1.0 – Are We Ready Yet?”I wrote up my own HOWTO for nginx just the other day. https://www.uhoreg.ca/blog/20160218-1757 I used the acme-tiny client instead of the official client. My post is mostly aimed at Debian-based distributions, but should be easily adaptable to others.
Comment linking /blog/20160218-1757
on “Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx”It’s not a server controlled secret; it’s a MAC of a shared secret negotiated via ECDH between the two clients. Diffie Hellman ftw. See https://www.uhoreg.ca/blog/20190514-1146
Comment linking /blog/20190514-1146
on “What is the point of a public key fingerprint?”