News for hackers. Stuff that matters.

A comment on Libgen Storage Decentralization on IPFS. Parent comment

Re:Libgen Storage Decentralization on IPFS by generationP on Wednesday November 25, 2020 @11:07AM (#25210673)
They don't want the extra weak spot of certificate revocation being abused against them?

Though I'm not sure how big of an issue this is; sci-hub is using https.

[ Parent | on HN ]
Re:Libgen Storage Decentralization on IPFS by _a1xx on Wednesday November 25, 2020 @03:47PM (#25214129)
Unless they activate HSTS, it shouldn't be a problem. They can always go back to HTTP if they want.

Also, Let's Encrypt doesn't even revoke certificates for malware and phishing sites. [1]

Maybe they're doing this for better caching performance? It makes SSL flood attacks impossible, but is that really worth it?

[1] https://community.letsencrypt.org/t/how-to-report-abuse/4110...

[ Parent | on HN ]