Top all-time · #7936
keychest.net
Company blog · keychest.net/storiessecurity
keychest.net is the company blog at keychest.net, writing about security. Since 2017, 10 different Hacker News readers have linked it 41 times, most often “ROCA Vulnerability Test Suite for Infineon RSA Flaw”. No feed was found, so read it on the site itself.
Too few sampled comments (8) to say how often HN recommends it.?
Why HN links it
HN readers link keychest.net mainly for its ROCA vulnerability checker and its Let's Encrypt certificate monitoring tool, plus stories on certificate lifetimes. Comments point to the tools rather than judge the writing.
Summarised by Claude from a sample of 8 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- ROCA Vulnerability Test Suite for Infineon RSA Flaw4 people · 4 mentions · first linked 2017-10-16
- Show HN: Letsencrypt (and other) certificate dashboard2 people · 5 mentions · first linked 2017-06-30
- Let’s Encrypt Numbers to Know – all rate limits with explanation2 people · 2 mentions · first linked 2017-06-30
- Let's Encrypt numbers to know2 people · 2 mentions · first linked 2017-07-04
What Hacker News says?
Many people mentioned that the Estonian ID card is vulnerable. I have an e-residency card, so I tried it out on https://keychest.net/roca If I use "pkcs15-tool --read-ssh-key 1" to read out the public key, (in the "ssh-rsa AAAAB3Nza....." format), then I get a vulnerable key warning (2048bit SSH key). On the other hand, if I use "pkcs15-tool --read-ssh-key 1 --rfc4716" to output in "---- BEGIN SSH2 PUBLIC KEY ----..…
Comment linking /roca
on “Infineon RSA Key Generation Issue”Submitted Show HN: Fun – unbreakable pen&paper encryption as a story · 15 points
HN discussionIf anyone is wondering if they are affected: https://keychest.net/roca
Comment linking /roca
on “Infineon RSA Key Generation Issue”Submitted Show HN: Automatic Discovery for Let's Encrypt Certificate Monitoring as a story · 11 points
HN discussionYeah, an "offline tester" [0] was made available by the researchers who discovered ROCA [1] and a company with "close links" to the researchers created a "ROCA Vulnerability Test Suite" [2]. The Estonian government also had one on their web site [3] but it is, apparently, no longer available. ROCA didn't just affect Estonian ID cards, though. It also affected also TPMs (from Infineon), certain Yubikeys [4], and even…
Comment linking /roca/
on “Estonian Electronic Identity Card: Security Flaws in Key Management”Submitted Show HN: Network Speed Test Against Digital Ocean (NYC, FRA, TOR, SGP) as a story · 7 points
HN discussionApple Drops SSL/HTTPS Bomb - Forget Long Certificates https://keychest.net/stories/apple-drops-sslhttps-bomb-forge...
Comment linking /stories/apple-drops-sslhttps-bomb-forget-long-certificates
on “Safari will no longer trust certs valid for more than 13 months”Submitted Show HN: Letsencrypt (and other) certificate dashboard as a story · 6 points
HN discussiononline: https://keychest.net/roca https://github.com/crocs-muni/roca offline info: https://crocs-muni.github.io/roca/
Comment linking /roca
on “Return of Coppersmith’s Attack: Vulnerable RSA Generation”Submitted Show HN: Real-time uptime monitor of Let's Encrypt as a story · 5 points
HN discussionThe submission URL should probably be changed to https://keychest.net/content/letsencrypt_numbers_to_know The current link is just a poor summary of the data on that page.
Comment linking /content/letsencrypt_numbers_to_know
on “Let’s Encrypt in the spotlight”Submitted Free LetsEncrypt and other SSL certs monitoring dashboard as a story · 5 points
HN discussionA better link IMHO would be to the main page ( http://keychest.net ) to learn how the app works and see how it compares to it's main competitor, letsmonitor.org
Comment linking /
on “Show HN: Automatic Discovery for Let's Encrypt Certificate Monitoring”Submitted Let's Encrypt Certificate into Java JKS as a story · 4 points
HN discussionSure, sorry, I'm not quite sure how it should work here. The signup page has a background video what the account looks like inside. BTW: if you signup and want to remove your account later, just drop us a line at support@enigmabridge.com . Demo video: https://vimeo.com/228584972 It is a cert expiry monitoring tool (but it does more thorough checks in regular intervals as well). In terms of main features: Spot Checks…
Comment linking /
on “Show HN: Automatic Discovery for Let's Encrypt Certificate Monitoring”Submitted Show HN: MS Teams – which certificate will expire next as a story · 4 points
HN discussionSubmitted HTTPS Monitoring Tools and 12 more tips as a story · 4 points
HN discussionSubmitted Let's Encrypt numbers to know as a story · 4 points
HN discussionSubmitted Why HTTPS Matters for Busy Folks – and Is More Than You Think as a story · 3 points
HN discussionSubmitted Let's Encrypt / ACME for newbies – how it works as a story · 3 points
HN discussionSubmitted Show HN: Find instantly subdomains with HTTPS cert expired in last 4 weeks as a story · 3 points
HN discussionSubmitted ROCA Vulnerability Test Suite for Infineon RSA Flaw as a story · 3 points
HN discussionSubmitted Show HN: Let's Encrypt/SSL Dashboard with automatic server discovery as a story · 3 points
HN discussionSubmitted Let’s Encrypt Numbers to Know – all rate limits with explanation as a story · 3 points
HN discussionSubmitted How It Works – From Hashing to Let's Encrypt Issuance as a story · 2 points
HN discussionSubmitted Coronavirus and our dependency on expiring HTTPS as a story · 2 points
HN discussionSubmitted What does Let's Encrypt sell when it's not certs as a story · 2 points
HN discussionSubmitted The State of PKI – Analysis of AppViewX BlackHat Survey as a story · 2 points
HN discussionSubmitted Secure by Design – The Economics, Stupid as a story · 2 points
HN discussionSubmitted Internal PKI with HashiCorp Vault – Install to First Cert as a story · 2 points
HN discussion