Hacker News with Generative AI: HTTPS

Caddy – The Ultimate Server with Automatic HTTPS (caddyserver.com)
The Ultimate Server makes your sites more secure, more reliable, and more scalable than any other solution.
The Internet's Time Is Flawed–Why No One Is Talking About It (ycombinator.com)
I’ve been researching how online time services sync over HTTPS, and the results are surprising.
Practical HTTPS Interception: 20 Years of SSL/TLS Interception (thc.org)
TL;DR: An attacker can trick Let's Encrypt (LE) to issue new TLS certificates for any domain that the attacker intercepts traffic for. The attacker can then decrypt the TLS traffic. This one thing that TLS is supposed to prevent from happening. The fault is that LE uses cleartext HTTP to verify the ACME-challenge (which the attacker can intercept).
Ten Years as a Free, Open, and Automated Certificate Authority (fosdem.org)
People deserve a secure and privacy-respecting Internet. Ubiquitous HTTPS is an essential part of delivering on that vision. To that end, our public benefit certificate authority has been issuing TLS certificates free of cost in a reliable, automated, and trustworthy manner for ten years. We went from issuing our first certificate in 2015 to servicing over 500,000,000 websites in 2025, and we’ve got big plans for the future.
Caddy Ninja – Setup an HTTPS-Enabled Web Server with Caddy on Alpine Linux (caddy.ninja)
Setup an HTTPS-enabled web server with Caddy on Alpine Linux
Curl -v HTTPS://Google.com (youtube.com)
Curl -v HTTPS://google.com [video] (youtube.com)
How to Make HTTPS Verifiable (reclaimprotocol.org)
Reclaim Protocol solves this by allowing users to generate cryptographic proofs of data exchanged over HTTPS connections, making the data on their screen verifiable and shareable.
History of HTTPS Usage (jefftk.com)
API Shouldn't Redirect HTTP to HTTPS (jviide.iki.fi)