News for hackers. Stuff that matters.

A comment on Public Key Pinning Being Removed from Chrome. Parent comment

Re:Public Key Pinning Being Removed from Chrome by Confiks on Friday October 27, 2017 @06:56PM (#15572903)
You pin a public key (of which the private key signs the leaf certificate, the sub-CA or the CA) with HPKP, not the certificate. With the default settings, LetsEncrypt re-uses the keypair for a new certificate.
[ Parent | on HN ]

There are no comments on this comment yet.