Top all-time · #25651
Vadims Podāns
Personal blog · sysadmins.lv/blog-ensecurityprogramming
Vadims Podāns writes Sysadmins LV, a personal blog at sysadmins.lv about security and programming. Since 2018, 3 different Hacker News readers have linked it 3 times. It is still writing: the last post was on 2026-05-13, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN commenters link Vadims Podāns's posts on X.509 certificates, including a digital signature lifecycle table and name constraints for limiting certificate authorities in TLS and intranet setups.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Vadims Podāns on Public Key Infrastructure and PowerShell
Most-linked posts?
- /blog-en/x509-name-constraints-certificate-extension-all-you-should-know.aspx2 people · 2 mentions · first linked 2021-07-15
What Hacker News says?
Take a look at the "Digital signature lifecycle table" here: https://www.sysadmins.lv/blog-en/digital-signatures.aspx
Comment linking /blog-en/digital-signatures.aspx
on “All of Oculus’s Rift headsets have stopped working due to an expired certificate”Well, there is the name constraints mechanism, but I'm not sure how well supported that is in TLS libraries and web browsers. https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.... https://timothy-quinn.com/name-constraints-in-x509-certifica... https://www.sysadmins.lv/blog-en/x509-name-constraints-certi... https://blog.codekills.net/2012/04/08/adventures-in-x509-the...
Comment linking /blog-en/x509-name-constraints-certificate-extension-all-you-should-know.aspx
on “Increasing HTTPS Adoption”You can use the X.509 Name Constraints extension to limit the power of your CA to just a single TLD. I personally just run on a public TLD with a wildcard cert (so my domains don't show up in cert transparency), but there is an alternative. - https://www.sysadmins.lv/blog-en/x509-name-constraints-certi... - https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10 Apparently (I haven't tested this), Chrome only checks…
Comment linking /blog-en/x509-name-constraints-certificate-extension-all-you-should-know.aspx
on “Creating an Intranet Like the Internet”