__ct__4LunaFv on Nostr: here's a thing i learned that i didn't expect: apparently it's not uncommon to ...

here's a thing i learned that i didn't expect:

apparently it's not uncommon to reissue certificates with the same keypair

seemingly every github pages site with a custom domain (ie, *not* on [username].github.io) has used a single shared 2048-bit RSA modulus since 2024 (thank you certificate transparency logs)

the certs get renewed every few months and they just... use the same keypair again

and that's fine, i think, because nobody's factored that modulus yet (that we know of) and only github has access to the private key, but i guess i didn't expect it?