CT: Managing uptime as a CA
This talk was given at the transparency.dev summit 2025.
Matthew McPherrin
Matthew McPherrin's Website
Latest posts
Ten Years as a Free, Open, and Automated Certificate Authority
This talk was given at SRECon25 Americas.
Shining a new light on Certificate Transparency
This talk was given at the transparency.dev summit 2024.
Web PKI Revocation is Broken (but we can fix it!)
The web public key infrastructure is used to secure HTTPS connections between browsers and websites using certificates. Today, when something goes wrong, browsers can’t reliably find out those certificates have been revoked. We examine past and future solutions to this problem, and how we can make progress on fixing revocation.
The S in HTTPS
I gave a talk for the Infrastructure Club, introducing how we communicate securely online.
Operationalizing SPIRE at Square
At the Spring 2020 SPIFFE community day, I gave a talk about my work to take our SPIRE deployment from a prototype to production software we relied on.
Colliding the sum checksum
The sum command-line tool is a simple checksum utility included in BSD and GNU Coreutils. It is not a cryptographically secure hash, and so I wrote a tool to set the sum of a file to an arbitrary value.
Blog
I have decided to set up a blog to organize and share things I do, just like everyone else’s blogs. I’ve made several decisions in how I’d like my blog to work.