Stories by agwa

CookieMonster: a tool for breaking stateless authentication

MarkMonitor left 60k domains for the taking

An Exploration of JSON Interoperability Vulnerabilities

The latest version of Slack has a setting to disable the WYSIWYG editor

Mozilla to distrust PROCERT certificate authority

Chrome’s Plan to Distrust Symantec Certificates

Show HN: CAA Record Generator

Already on probation, Symantec issues more illegit HTTPS certificates

Incident Report – Certificates issued without proper domain validation

Update on transition of the Verizon roots and issuance of SHA1 certificates

How to Crash Systemd in One Command

WoSign Incidents Final Report [pdf]

Why Chrome 53 Is Rejecting Chase Bank's Symantec Certificate

IPv6 Support for Amazon S3

Show HN: Certificate Transparency Log Monitor

Certificate Incident

Domain Validation Vulnerability in Symantec Certificate Authority

Against Security Nihilism

You Can Now Turn Off Ads on Techdirt

Why Chrome Thinks Your SHA-2 Certificate Chain Is “Affirmatively Insecure”

1 2 3