News for hackers. Stuff that matters.

A comment on Public Key Pinning Being Removed from Chrome. Parent comment

Re:Public Key Pinning Being Removed from Chrome by posixplz on Friday October 27, 2017 @06:38PM (#15572793)
I imagine things have only gotten "worse" with Let'sEncrypt issuing 90 certificates.
[ Parent | on HN ]
Re:Public Key Pinning Being Removed from Chrome by Confiks on Friday October 27, 2017 @06:56PM (#15572903)
You pin a public key (of which the private key signs the leaf certificate, the sub-CA or the CA) with HPKP, not the certificate. With the default settings, LetsEncrypt re-uses the keypair for a new certificate.
[ Parent | on HN ]