WebPKI and You

Summary

The article explains WebPKI, its history, and different certificate types. It highlights the complexities and potential shortcomings of the system, particularly regarding validation and user awareness. The author offers suggestions for improvement and increased transparency.

Key Takeaways

1. HTTPS relies on a public key infrastructure to ensure only authorized servers have keys for specific websites.
2. The difference between Domain Validated (DV), Organization Validated (OV), and Extended Validation (EV) certs is worth discussing.
3. HTTPS certificates are an incredibly powerful tool to safeguard the communication between a relying party and a subscriber, a user and a company, a person and a website.

Statement Breakdown

• Claimed Facts: 60% of statements the article presents as facts
• Opinions: 30% of statements classified as editorial or subjective
• Claims: 10% of statements surfaced for additional reader evaluation

Credibility & Bias Reasoning

Credibility assessment: The article provides a detailed overview of WebPKI and HTTPS, including historical context and technical explanations. The author cites sources and provides links to relevant documentation. However, the writing style is informal and includes some subjective opinions, which slightly lowers the credibility score.

Bias assessment: Technological Skepticism. The author expresses skepticism towards certain aspects of WebPKI, particularly regarding the effectiveness of Extended Validation certificates and the complexity of the system. This perspective is evident in the author's commentary and choice of language. However, the article also presents factual information and historical context, preventing a higher bias score.

Note: This article provides a detailed but opinionated overview of WebPKI. Consider the author's perspective when evaluating the information presented.

Credibility flag: Informative, Opinionated

Claimed Facts (7)

• This is a factual statement about the function of HTTPS.
• This describes the process of key generation.
• This lists the contents of a certificate issued by a CA.
• This describes the validation process for DV certificates.
• This explains how domain control is verified using ACME.
• This is a factual statement about OV certificates.
• This describes the requirements for EV certificates.

Opinions (5)

• This is an opinionated take on the role of CAs.
• This is an opinionated statement about the theory behind EV certificates.
• This is an opinionated statement about user behavior and browser design.
• This is a subjective comment on the complexity of OIDs.
• This is a subjective comparison of OIDs and SQL.

Claims (3)

• This is a hyperbolic scenario that is unlikely to occur.
• This is an exaggerated claim about browser development.
• This is an outdated and potentially exaggerated claim about the cost of SSL certificates.

Key Sources

• Bryce Kerley — Author
• Melih Abdulhayoglu — founder of the Comodo CA