Bug 647959 – Add Honest Achmed's root certificate
Report a link problem
Submission timeline
2007–2026One slot for every year since HN launched. Height is that year's peak points; orange marks a 100+ point or 50+ comment breakout. Select a bar to open its strongest thread.
First comments on top threads
HN comment orderThe problem is that we are forced to trust a particular CA because the company we are dealing with chose to buy their certificate from that particular CA. Whilst PKI provides solutions for this [1], they are not really practical in SSL. In any case, that's not how it works in the real world. In the real world, Achmed's uncles do trust Achmed, and might well trust him to validate the identity of a business partner. In essence, that's the…
I'm really disappointed that www.honestachmed.dyndns.org/cert.der didn't work :(
For those looking for more context - If memory serves it was in response to https://en.wikipedia.org/wiki/Comodo_Cybersecurity#Certifica... and the various controversies around it. Honest Achmed has been one of my favorites for as long as its been around.
For a long time, I've argued we need leaf certificates to be double signable. That way there can be two chains of trust for a website. Then dropping a CA doesn't matter much, since all serious parties should have multiply signed paths to various roots of trust. Hence we solve the problem of CAs becoming to big to fail. The current way cross-signing works is almost an accident, and only works for intermediate certificates. Because the 'signing cert' is looked…
The first top-level comment from each of the four biggest threads, in HN’s own order. Excerpts are shortened; open a comment for full context.
- Breakout years
- 3
- Total points
- 530
- Total comments
- 261
100+ points or 50+ comments
reference only — not used in Hall rules or ranking
reference only — not used in Hall rules or ranking
Every submission
| Date | Title as submitted | By | Points | Comments |
|---|---|---|---|---|
| 2011-04-19 | Bug 647959 – Add Honest Achmed's root certificateFirst breakout · Best thread | there | 200 | 114 |
| 2014-04-07 | Add the CA root certificate for Honest Achmed's Used Cars and Certificates | galapago | 2 | 0 |
| 2016-01-04 | Bug 647959 – Add Honest Achmed's root certificate (2011) | Moral_ | 111 | 68 |
| 2017-12-03 | Add Honest Achmed's root certificate to Mozilla CA root store (2010) | Shoothe | 32 | 8 |
| 2020-01-23 | Add Honest Achmed's root certificate (2011)Hall induction | baud147258 | 2 | 0 |
| 2023-04-08 | Add Honest Achmed's root certificate (2011) | timothyg | 73 | 25 |
| 2025-01-18 | Honest Ahmed (2011)Latest 20+ point return | bitneuker | 110 | 46 |