🤝
Make a deal with Matthew McPherrin
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
428
Account age
3 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🧰 Free analysis for Matthew McPherrin
Known for
76 views
Congratulations to the Firefox team for shipping CT enforcement!
> Starting in Firefox 135, Certificate Transparency is now enforced on all desktop platforms.
https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/OagRKpVirsA/m/Q4c89XG-EAAJ
17 views
Of all the things I didn’t expect to ever happen, iOS Safari actually got a certificate viewer in 18.4! https://webkit.org/blog/16574/webkit-features-in-safari-18-4/#connection-security
10 views
Firefox's new "security alert" and "no connection" error page illustrations are pretty great
5 views
Huh, that’s a message I haven’t seen before
📊 Post engagement
18
Avg engagement / post
4.2%
Engagement vs followers
Nov 2022
On Mastodon since
🔥 Top post: Congratulations to the Firefox team for shipping CT enforcement! · 76 likes + reposts
📊 Activity & format
Posting cadence
0.15 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly text
Recent: 7 text · 5 image · 0 video.
Follower / following
1.4×
Follows 309 back. A more reciprocal / networked account.
Recent posts
View on Mastodon ↗
🔥 Top post
Congratulations to the Firefox team for shipping CT enforcement!
> Starting in Firefox 135, Certificate Transparency is now enforced on all desktop platforms.
https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/OagRKpVirsA/m/Q4c89XG-EAAJ
I’m at BSidesLV and DEFCON this week. Find me and say hello!
Huh, that’s a message I haven’t seen before
Have you ever needed to make sure your website has an expired or revoked certificate? No, that's not a problem people have. But we do, because CAs have to run test sites with them.
I just wrote a blog post post about this problem, and our …
Firefox's new "security alert" and "no connection" error page illustrations are pretty great
It looks like some of this data is incorrect due to a Firefox bug, which I've filed as https://bugzilla.mozilla.org/show_bug.cgi?id=1972339
Firefox's telemetry has data on how many times a CA is used to successfully validate certificates. This is a pretty good measure for how "big" a CA is. The data is hard to view in Mozilla's site, so I've made a script to combine a few data…
Inspired by the classic xeyes program, I made a thing:
ssh teyes.fly.dev
Or go install github.com/mcpherrinm/teyes@latest && teyes
Give your mouse a wiggle over the terminal!
I'll be speaking at the Ontario Cryptography Day!
https://ontario-crypto-day.github.io/
Where: University of Waterloo Davis Centre (DC) 1301 and 1302
When: Friday, June 6, 2025, from 10am to approx. 4:30pm
I hope anyone in the area interes…
Of all the things I didn’t expect to ever happen, iOS Safari actually got a certificate viewer in 18.4! https://webkit.org/blog/16574/webkit-features-in-safari-18-4/#connection-security
We've issued our first short-lived (6 day) certificate! https://letsencrypt.org/2025/02/20/first-short-lived-cert-issued/
Chrome has published version 1.6 of their root store policy.
Notably, this contains a timeline for deprecating use of the TLS Client Auth extended-key-usage inside the PKIs included in their program.
If you currently use TLS Client Auth fr…
Huh, that’s a message I haven’t seen before
Have you ever needed to make sure your website has an expired or revoked certificate? No, that's not a problem people have. But we do, because CAs have to run test sites with them.
I just wrote a blog post post about this problem, and our …
Firefox's new "security alert" and "no connection" error page illustrations are pretty great
It looks like some of this data is incorrect due to a Firefox bug, which I've filed as https://bugzilla.mozilla.org/show_bug.cgi?id=1972339
Firefox's telemetry has data on how many times a CA is used to successfully validate certificates. This is a pretty good measure for how "big" a CA is. The data is hard to view in Mozilla's site, so I've made a script to combine a few data…
Inspired by the classic xeyes program, I made a thing:
ssh teyes.fly.dev
Or go install github.com/mcpherrinm/teyes@latest && teyes
Give your mouse a wiggle over the terminal!
I'll be speaking at the Ontario Cryptography Day!
https://ontario-crypto-day.github.io/
Where: University of Waterloo Davis Centre (DC) 1301 and 1302
When: Friday, June 6, 2025, from 10am to approx. 4:30pm
I hope anyone in the area interes…
Of all the things I didn’t expect to ever happen, iOS Safari actually got a certificate viewer in 18.4! https://webkit.org/blog/16574/webkit-features-in-safari-18-4/#connection-security
We've issued our first short-lived (6 day) certificate! https://letsencrypt.org/2025/02/20/first-short-lived-cert-issued/
Chrome has published version 1.6 of their root store policy.
Notably, this contains a timeline for deprecating use of the TLS Client Auth extended-key-usage inside the PKIs included in their program.
If you currently use TLS Client Auth fr…
🐘 Community & instance
Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.
💡 Facts
🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 18 views per post.
📤Posts about 0.2× per week.
🕵️ Fake follower check
Estimated80/100
Excellent
Credibility score
97%
Real
Real audience
Low
Fake-follower risk
High
Data confidence
- Est. 97% real, active audience · Low fake-follower risk.
- Strong engagement (~4.2% of followers engage each post) — an active, real audience.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
SRE at Let's Encrypt, though these toots are my own.
📸 Gallery
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
plinth
18%
Hélène Lœvenbruck
18%
Daniel Fisher(lennybacon)
17%
Gene Cowan 🏳️🌈
15%
Shiroi Yoru(白い夜)
15%
Maciej Barć
11%
More like this
Find more →
Mastodon
Gene Cowan 🏳️🌈
@genecowan@mastodon.social
428
Followers
Mastodon
Maciej Barć
@xgqt@functional.cafe
428
Followers
Mastodon
plinth
@plinth@infosec.exchange
428
Followers
Mastodon
Shiroi Yoru(白い夜)
@shiroiyoru@pawoo.net
428
Followers
Mastodon
Hélène Lœvenbruck
@loevenbruckln@mas.to
428
Followers
Mastodon
Daniel Fisher(lennybacon) ✓
@lennybacon@infosec.exchange
428
Followers
✉ Message Matthew McPherrin
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with Matthew McPherrin
Booking an event / appearance is a Pro feature. Upgrade to book Matthew McPherrin for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ Matthew McPherrin gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove