BlackHat USA 2011: SSL And The Future Of Authenticity
9 人推荐 · 跨 7 个月 · 2011–2017
中文导读
Moxie Marlinspike 在 BlackHat 2011 上的经典分享。他尖锐剖析了传统 SSL 与 CA 证书认证体系存在的信任根单点缺陷，并提出了基于分布式公证与“信任敏捷性”的替代解决方案 Convergence。
为什么 HN 推它
HN 网友一致推崇为讲透 CA 体系结构性硬伤及潜在演进方向的最佳演讲。
「关于这个议题，这是我所知道的最出色的演讲。」HN 网友原话：best talk I know of this subject
英文原摘要（HackerTube / Claude 整理）
Moxie Marlinspike's BlackHat 2011 talk examines weaknesses of SSL and the certificate authority system and proposes Convergence, a decentralized notary approach with trust agility.
HN commenters repeatedly recommend it as the best explanation of why the CA system is broken and what alternatives exist.
HN 上的提及
the implementation provided with Perspectives does not have privacy.
the best reference is (unfortunately) still the presentation
Comodo had huge issues very recently
I highly recommend watching his Blackhat 2011 talk
quite an interesting discussion on the issue.