Unverified50% confidenceFactExact time
Trust policies typically use a hash of the SPKI (such as SHA-256) as a fixed identifier for the public key, a technique known as "public key pinning".
1
Sources
50%
Confidence
Long-term
Relevance
10/20/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSPKI is a standard field in X.509 certificates that follows the ASN.1 SubjectPublicKeyInfo structure and contains the public key algorithm identifier and the public key itself.74% similarUnverifiedRejecting specific SPKIs this time is a continuation of Go's proactive defense strategy, but being precise down to the public key level means that even if a CA as a whole remains trusted, its specific public keys can be individually marked as untrusted.72% similarUnverifiedA paid API key system should follow the principle: never store the actual key, only store a hash fingerprint of the key.71% similarUnverifiedEach key is processed through SHA-256 to generate a one-way fingerprint that cannot be reversed to recover the original key.68% similarUnverifiedShrine's treasure chest feature is a secrets proxy; secrets are stored in 1Password, agents can only see placeholders, and the real values are substituted only when a request is directed to an authorized host.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1073183API
curl https://kongchang.com/api/v1/knowledge/claims/1073183MCP
get_claim(id=1073183)