21 Oct 2023
https://mcpherrin.ca/2023/10/21/bsides-revocation.html
The web public key infrastructure is used to secure HTTPS connections between browsers and websites using certificates. Today, when something goes wrong, browsers can’t reliably find out those certificates have been revoked. We examine past and future solutions to this problem, and how we can make progress on fixing revocation.
23 Nov 2019
https://mcpherrin.ca/2019/11/23/sum-collisions.html
The sum command-line tool is a simple checksum utility included in BSD and GNU Coreutils. It is not a cryptographically secure hash, and so I wrote a tool to set the sum of a file to an arbitrary value.