ทวีตที่ปักหมุด
PrivaCT
18 posts
PrivaCT
@PrivaCT_dev
Upgrading the internet using prism
Germany เข้าร่วม Mart 2025
6 กำลังติดตาม21 ผู้ติดตาม
Celestia Mammothon App Breakdown #6: PrivaCT
@PrivaCT_dev is a browser extension that leverages @prism_xyz to deliver trust-minimized Certificate Transparency (CT) directly to users.
In other words, PrivaCT ensures websites are truly secure by using cryptographic proofs instead of blind trust.
Now, let's break this down in more detail👇
The Traditional Approach
When you visit a website, your browser displays a 🔒 icon in the address bar. This lock icon indicates that our connection to the server is secure & encrypted, meaning the data exchange (such as you entering your login password for the site) remains confidential.
However, it does not guarantee that the website itself is legitimate.
That’s where TLS certificates come in.
These are digital certificates that prove the site’s identity. Without this certificate, a site may be fake (like a phishing site trying to steal your info).
These certificates are issued by Certificate Authorities (CAs), whose job is to verify that a website is who it claims to be. When a CA approves a certificate, your browser trusts that website is legit.
The problem however is that CAs can get hacked, make mistakes, or be tricked into issuing fake certificates. If that happens, a malicious website could appear 100% real, & users wouldn’t know it. For example, you could unknowingly enter your password on a fake website that looks exactly like the real one.
To prevent this problem, the Certificate Transparency (CT) system was created, requiring all certificates to be logged in a public record so that fake certificates can’t be issued in secret.
However, the problem with CT is that browsers don’t actually check that a certificate was properly logged. They just trust a promise that it will be logged later.
This is where PrivaCT comes in.
PrivaCT is a browser extension that improves Certificate Transparency (CT) by using verifiable proofs to ensure a website’s certificate is actually logged before your browser accepts it.
Here’s how it works.
As mentioned, traditional browsers trust a CAs promise that a certificate will be logged in a CT log later, whereas with PrivaCT, instead of relying on a CA’s word, it checks whether a certificate has already been logged using proofs. Specifically, these proofs confirms that a certificate exists in the CT log.
PrivaCT then verifies the proof inside the browser before accepting the certificate. If the proof checks out, the website is safe. If not, your browser will reject the certificate & warn you.
Here's what that looks like in practice.
❌ Bad Site:
✅ Safe Site:
Overall, PrivaCT makes browsing safer. Instead of relying on promises, it uses cryptographic proofs to provide real security.
But let us know what you think in the comments below. Is this something you'd use for your daily browsing?
English
@modularmedia_ @PrivaCT_dev @prism_xyz PrivaCT is a great for browser security, finally replacing blind trust with verifiable proofs.
No more relying on CAs' promises; now, cryptographic guarantees ensure your connection is legit.
English
This project was a finalist of the recent global Mammothan, organized by @celestia and @encodeclub.
Without their help and the amazing support of the chads @prism_xyz, @spusch810, and @distractedm1nd none of this would be possible!
English