Top all-time · #21580
Musings about WebPKI and Public Trust
Personal blog · webpki.substack.comsecurity
Musings about WebPKI and Public Trust is a personal blog at webpki.substack.com about security. Since 2024, 3 different Hacker News readers have linked it 12 times, most often “Entrust considered harmful – Part 1”. It is still writing: the last post was on 2025-04-22, and you can follow it by feed.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN readers link this Substack for long-form writing on the WebPKI and public certificate authority trust, including Entrust's distrust and the accountability of CAs. It appears in threads on Let's Encrypt, Entrust and DigiCert.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
A newsletter about the happenings in the world of Public Trust and WebPKI.
Most-linked posts?
- Entrust considered harmful – Part 12 people · 2 mentions · first linked 2024-04-15
What Hacker News says?
Entrust didn’t get nuked over a single incident, they were nuked because of a pattern of behavior that extended back several years. https://webpki.substack.com/p/entrust-considered-harmful-par...
Comment linking /p/entrust-considered-harmful-part-1
on “DigiCert: Threat of legal action to stifle Bugzilla discourse”Submitted Entrust mis-issues a certificate, Refuses To Follow CA/B Rules as a story · 23 points
HN discussionI’m active in the WebPKI community (you might want to check out my Substack: https://webpki.substack.com/ ) EV and OV when it includes dns names still requires domain control validation anyway. EV certs are generally manually verified. This means there’s a human factor in the middle of this process. DV certs can, and should, be fully automated. Multi perspective validation is about to be required too: https://cabfor…
Comment linking /
on “Let's Encrypt is 10 years old now”Submitted Mozilla: Entrust Issues – What Is Entrust's and WebPKI's Future? as a story · 5 points
HN discussionI’m one of the people who really went in depth with Entrust (Amir on Bugzilla). I’m also an author on https://webpki.substack.com . I will be writing my thoughts on the distrust soon. I can try to answer any questions folks may have. I can also help folks find ways they can also be involved! Root programs can only do so much and need surveillance of the CAs from the community.
Comment linking /
on “Entrust Certificate Distrust”Submitted Entrust considered harmful – Part 1 as a story · 5 points
HN discussionI would spend my time creating automation to hold public CAs accountable. Some of my work is visible in https://WebPKI.substack.com
Comment linking /
on “Ask HN: What would you spend your time working on if you didn't need money?”Submitted Reflections on Entrust's Distrust as a story · 4 points
HN discussionSubmitted Workload Identity: Part 1 as a story · 3 points
HN discussionSubmitted Entrust considered harmful – Part 2 as a story · 3 points
HN discussionSubmitted Entrust considered harmful – Part 3 as a story · 2 points
HN discussionSubmitted Issuance Auditability: Certificate Validation Methods as a story · 1 points
HN discussion