Hμblog for 2023-11

Towards Greater Accountability: A Proposal for CA Issuance Decision Logs Exploring the Potential of Domain Control Notaries for MPDV in WebPKI

20231125 security, webpki, pki, cryptography, ct #

Interesting articles by Ryan Hurst about possible improvements to WebPKI security via more certificate transparency (CT)-like technologies. There's also my own writings on CT.

Stop deploying web application firewalls

20231114 cloudflare, web, security #

Excellent writeup by Mac Chaffee about how web application firewalls are universally a terrible idea. I've been meaning to write an article on this subject for some time, but this is a good overview of many issues with them.