As I understood it a certificate authority (the thing that you trust to make sure a website is who it claims it is) used 4 as the “password” for their cryptographic key, which would make it quite easy for a malicious attacker between you and a legit website, to modify the contents, encrypt it with their own key and then send their own certificate of, looking like it came from a certificate authority that you trust, essentially enabling an attacker to break encryption. (for example an ISP could do this as all the traffic goes through them)
As I understood it a certificate authority (the thing that you trust to make sure a website is who it claims it is) used 4 as the “password” for their cryptographic key, which would make it quite easy for a malicious attacker between you and a legit website, to modify the contents, encrypt it with their own key and then send their own certificate of, looking like it came from a certificate authority that you trust, essentially enabling an attacker to break encryption. (for example an ISP could do this as all the traffic goes through them)
It used 4 as the cryptographic key. (CA keys are not password protected afaik)
yeah I wasn’t sure if they have 4 as the key or 4 in some encoding. the key being straight up 4 is crazy
It’s base64 encoded along with some metadata, and cryptographically hashed so all keys are the same length.