Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Well, the CA system for HTTPS is a false sense of Identity protection. Is great for encryption.

0: https://stripe.ian.sh/



That site really is stripe.ian.sh like the certificate says.

It really is for Stripe, a real US company.

That the US (and every other county we care about) intentionally lets crooks run companies in order to defraud the general populace is a problem you could try taking up with your government. Although in the US that's currently led by a career grifter and a bunch of crooks so your message may not get through.

But the Web PKI did everything it could here, don't blame us.


I'm just rehashing an old argument: https is encryption vs https is identity. Sorry




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: