Tech News
← Home  ·  All topics

Vanity Private Key

1 GoKawiil brief on this topic

Blogger embeds protest message inside a valid TLS certificate's public key

A developer crafted a 'protest certificate' for maurycyz.com by choosing a private key whose resulting public key bytes spell out a readable ASCII message criticizing the SSL/TLS certificate system, then had it issued normally through Let's Encrypt. The post notes certificate authorities never verify that a submitted public key was generated from truly random data, citing a prior case where a CA issued a certificate using the trivial private key value '4'.