Cert authority that thinks 256-bit means "0 to 255" sparks trust-chain accountability debate
irl_danB · x · 2026-10-22
Developer irldanB calls out a certificate authority that apparently interpreted 256-bit as "a number between 0 and 255"—and questions how such an organization got included in an upstream trust chain at all.
He argues this is as much a failure by whoever admitted them to the authority chain as by the CA itself, and asks how CAs are chosen and verified upstream—and why there's no qualifying exam. Replies suggest lifetime bans for incompetent infra/software stewards, analogous to securities-industry bans.
More from Safety
- Crime group used Claude, Grok and Kimi agents to attack 400+ banks in Latin America — anshulkundaje · 2026-10-23
- Greg Brockman: AI makes hacking 100x more profitable and easier, upending hacker economics — gabriel1 · 2026-10-23
- Account hacks surge: 6-step emergency checklist plus an AI audit prompt — petergyang · 2026-10-23
- For consumer AI founders, 'When are you launching in Europe?' is the new 'When Android?'—only 100x worse — omooretweets · 2026-10-23
- mmitchell_ai questions whether the AI safety vs security framing stems from EA — mmitchell_ai · 2026-10-23
- MPI-Sec PhD Thesis on Vulnerability Detection Benchmarks Includes Pre-LLM Classic "Top Score on the Wrong Exam" — mboehme_ · 2026-10-23