September 2012
- Logo for x509Labs
Just got a logo for x509labs, what do you think?
- RESTful X509, CRL and OCSP to JSON web-service
So the other day I got a bee in my bonnet and decided I wanted a simple web service I could pass common day X509 objects to and get a JSON representation of that same object. We had recently done a project in Go at work…
- A look at revoked certificates
So today I have done posts on the browser user experience for expired and untrusted certificates but we wouldn’t have proper coverage on the topic of bad certificate user experience if we did not cover revoked…
- A look at untrusted certificates
Today I did a blog post on how browsers show expired certificates. I figured I would take the opportunity to capture a few of the other failure cases for certificates.
- A look at expired certificates
Today I was on a mail thread where the topic of how browsers handle expired certificates; this is particularly relevant for a few reasons.
- How to tell DV and OV certificates apart
There are in essence three kinds of SSL certificates: Domain Validated, Organization Validated and Extended Validated. I am not going to write about the differences here it seems that there are hundreds of articles on…
- Windows XP and Name Constraints
Recently I blogged about how Windows XP processes Name Constraints a little different than the RFC specifies -- with the help of a friend I have a good set of examples of what would work and what would not work that…
- Algorithms, key size and digital certificates
On the surface the digital certificates are not complicated -- a third-party (a certificate authority) verifies some evidence and produces a piece of identification that can be presented at a later date to prove that the…