DEF CON 19 - Moxie Marlinspike - SSL And The Future Of Authenticity
4 人推荐 · 跨 4 个月 · 2013–2026
中文导读
Moxie Marlinspike 在 DEF CON 19 上的里程碑式演讲，剖析 SSL/TLS 证书信任链（CA）的底层缺陷，揭示寡头信任背后的安全隐患，并提出一种去中心化的信任替代方案。
为什么 HN 推它
HN 探讨 TLS 证书信任模型和 HTTPS 体系漏洞时必看的安全经典，隔三差五就会被重新翻出讨论。
「Moxie Marlinspike 的这场演讲是对这类信任机制问题最透彻的高屋建瓴总结。」HN 网友原话：I've found Moxie Marlinspike's talk [1] to be a great overview of these sorts of issues.
英文原摘要（HackerTube / Claude 整理）
Moxie Marlinspike's DEF CON 19 talk on the weaknesses of SSL and the certificate authority system. He explains how CA trust became a problem and proposes an alternative that removes the CA oligopoly without reducing security.
HN points to it as the classic overview of why TLS certificate trust is flawed, and it resurfaces whenever CA or HTTPS security comes up.
HN 上的提及
removes the certificate authority oligopoly from the picture without reducing security
you should definitely watch Moxie Marlinspike's (lead dev of Signal) talk
Moxie has good points about the problems TLS has.
Moxie (of Signal fame) has a hilarious account of the story