Why “webpki” is being discussed
The most recent Hacker News stories and comments contributing to this topic's mentions.
Go is not vulnerable in the same way software using webpki is, because it generally uses the system trust store. However, this change is about golang proactively blocking the ce…
by colinmarc · Oct 22, 2026
> Unless you plan to assign your Ethernet expander a domain name, how do you expect it to participate in WebPKI? Well, it does support DDNS, [1] so presumably some people do ass…
by scottlamb · Oct 21, 2026
You said "yes" but then answered "no"? Like it seems your disagreement is that you're pointing out there are systems today that trust WebPKI CAs but don't validate CT/SCTs.…
by akerl_ · Oct 21, 2026
I've looked at this question a bit more closely, and it seems that the Baseline Requirements for WebPKI do not require key rotation unless key compromise is known to have occurr…
by kbolino · Oct 21, 2026
What stops our adding a record that requires DANE and a conventional CA? (Preload it like HSTS, if you'd like, to prevent US IC downgrade attacks if people stupidly configure DN…
by quotemstr · Oct 20, 2026
Today's incident isn't a domain binding issue; it's a key mishandling issue. Elevating the role of TLD operators here just increases the number of organizations we have to trust…
by tptacek · Oct 20, 2026
Interest
Proportion of Hacker News items mentioning "webpki" over time.
Mentions
Total number of Hacker News items mentioning "webpki" over time.