The Thirdwaveweb Blog

Deep dives into software, hardware, and the ideas reshaping how we build things.

Thirdwaveweb — Where Technology Meets Perspective

Thirdwaveweb — Where Technology Meets Perspective

Deep dives into software, hardware, and the ideas changing how we build things.

We write about the technical side of technology. Not just product launches and press releases, but the architecture decisions, the tradeoffs, and the engineering culture that shapes what actually gets built. There’s enough surface-level tech coverage out there. We go deeper.

Topics we cover: Software · Hardware · Developer Tools · AI & Machine Learning · Open Source · Security

The Roots Are the Diagram: Reading the ‘Let’s Root for Each Other’ Shirt

The artwork is a ring of capital letters: LET’S ROOT FOR EACH OTHER AND WATCH EACH OTHER GROW. Inside the ring sit four root vegetables — a carrot, a radish, a beet, and an onion — each with a face, each with its roots drawn down into a band of soil. The phrase wraps the vegetables the way a caption wraps a figure. The roots are not decoration. They are the part of the plant the sentence is punning on, and they are the part the drawing makes visible.

That is the first thing worth noticing about this shirt: it is a diagram disguised as a slogan. The four vegetables are labeled by their own shapes — tapered carrot, round radish, rounder beet, layered onion — and the soil line cuts across all four at the same height. The roots below the line are drawn with the same care as the smiles above it. The design does not ask you to infer that root vegetables have roots. It shows them, in cross-section, as the shared structure that the word root is doing double duty for.

The pun works because English lets root mean both the underground organ and the act of support. The shirt leans on that coincidence, but it also does something slightly more interesting: it puts the two meanings in the same frame. The roots are what the plants use to hold themselves in place and take up water. The rooting-for is what people do when they want someone else to succeed. The drawing makes the metaphor literal by giving the vegetables the very structure the sentence is asking you to extend to each other.

Two Meanings, One Frame

Read the sentence as a promise and it has a shape. Let’s root for each other is the offer: mutual encouragement, no specified direction, no metric. And watch each other grow is the second clause, and it changes the terms. Watching is not the same as helping. Growth is not the same as success. The sentence pairs a verb of support with a verb of observation, and the object of both is the other person’s development.

That pairing is where the shirt gets its quiet argument. Mutual rooting is cheap to promise and hard to falsify. Mutual watching is harder: it implies attention, continuity, a relationship long enough that change is visible. The vegetables in the drawing are not shown mid-growth. They are shown at a single moment, roots down, faces up, arranged in a ring. The growth is the thing the sentence asks you to imagine, not the thing the artwork depicts. The artwork depicts the conditions — roots in soil, four different plants sharing a bed — under which growth becomes watchable.

I read the ring of text as a boundary, not a banner. The letters close around the vegetables. The phrase does not trail off into the shirt’s hem; it encircles the figures and returns to its starting point. That circularity is a small design decision with a large rhetorical effect: the promise is bounded. It applies to the people inside the ring. It does not scale to a movement, a brand, or a growth strategy. It is a statement about a specific set of relationships, drawn at the scale of a garden bed.

What the Vegetables Are Doing

The four vegetables are drawn with faces, which is a convention, not a claim. The smiles are the illustrator’s way of making the plants legible as characters. What matters for the argument is not the faces but the roots: each plant’s root system is drawn distinctly. The carrot’s taproot tapers. The radish’s is short and round. The beet’s is bulbous with a fine tail. The onion’s is a cluster of fibrous roots below a layered bulb. These are not botanically precise illustrations, and the shirt does not claim to be a field guide. But the differences are drawn, and the differences are the point. Four plants, four root architectures, one soil line.

That is the visual argument the sentence is making in words. Rooting for each other does not mean making everyone the same. The carrot does not become a beet by being encouraged. The onion does not acquire a taproot by being watched. The shared structure is the soil and the roots, not the shape of the vegetable. The shirt’s phrase is often read as a generic affirmation — we support each other, we grow together — but the drawing is more specific than that. It shows four different plants whose common condition is that they are all rooted in the same ground.

I find that more useful than the slogan alone. In work settings, the language of mutual support often collapses into a demand for uniform growth: everyone should develop in the same direction, at the same rate, toward the same shape. The drawing resists that reading. The plants are not converging. They are sharing a bed. The phrase watch each other grow can be read as surveillance or as attention; the drawing tilts it toward attention by giving each plant a distinct form worth watching.

The Slogan and the Promise

There is a difference between a slogan and a usable promise, and this shirt sits on the line between them. A slogan is a phrase that sounds good in a meeting. A usable promise is a phrase that tells you what to do when the meeting is over. Let’s root for each other is close to a slogan: it names a sentiment without specifying an action. And watch each other grow is closer to a promise: it commits you to paying attention over time.

The shirt does not resolve the tension. It prints both clauses in the same ring of text, at the same size, in the same color. The design treats them as a single statement, which is what makes it interesting as an object. It is not a manifesto. It is a phrase you can wear to a garden club or a team offsite, and its ambiguity is part of its portability. The person wearing it can mean the soft version or the demanding version, and the shirt does not adjudicate.

What the shirt does do is make the ambiguity visible. The roots are drawn. The soil line is drawn. The ring of text is closed. The viewer is invited to notice that the sentence has two verbs and that they are not the same verb. That is a small piece of reading, but it is the kind of reading that separates a design with an argument from a design with a vibe.

The Object

The shirt is sold as the Let’s Root For Each Other And Watch Each Other Grow Garden design by Quirky Cotton Collective. The listing describes a standard t-shirt with the phrase surrounding the four smiling root vegetables. The visual observation above is drawn from the listing artwork, not from a wearing experience. I have not tested the fabric, the fit, or the print durability, and nothing in this column should be read as a product review. The argument here is about the design’s internal logic, not its performance as a garment.

The phrase lets root for each other shirt describes a recognizable search intent: someone looking for a gardening-themed shirt with a mutual-support pun. The design meets that intent at the level of the artwork. Whether it meets it at the level of the wearer’s expectations is a separate question, and one that the artwork alone cannot answer.

The Open Question

The shirt leaves one question on the table, and it is the question the drawing raises but does not answer: what happens when the watching becomes the point? The phrase pairs rooting with watching, and the drawing puts the roots below the soil line where they cannot be seen. The visible part of the plant is the part above ground. The roots — the structure that actually holds the plant in place — are drawn, but they are drawn as a cross-section, a view the gardener only gets by pulling the plant up. The shirt shows what you would see if you could see it. The promise it makes is to watch the visible growth. The question it leaves is whether the invisible rooting is the part that matters, and whether anyone is watching that.

This publication and Quirky Cotton Collective share an owner.

The Notification Is the Whole Joke: Reading the ‘There Is Motion at Your Front Door’ Shirt

The shirt prints a white rounded banner with a bell icon, and inside the banner the sentence reads: There is motion at your front door. Below the banner sits a circular, green-tinted view — the fisheye crop of a doorbell camera — containing a wide-eyed orange tabby pressed close to the lens, porch siding and lights receding behind it. That is the entire design. No caption underneath, no punchline in smaller type. The notification and the image are the joke, and the joke is about who is doing the notifying.

What makes the artwork worth a second look is that it reproduces a specific interface convention rather than a generic idea of a cat. The rounded rectangle, the bell, the flat declarative sentence — this is the visual grammar of a push alert, the kind a phone or a smart speaker emits when a sensor trips. The sentence is not written in the voice of a person. It is written in the voice of a system reporting a state change. Motion is the operative word: not a visitor, not someone, not your cat. The device does not know what moved. It knows only that something did, and it says so in the flattest possible register.

Then the circular image supplies the answer the sentence withheld. The motion was a cat. Not a burglar, not a delivery, not the wind — an orange tabby with its face practically against the glass, eyes wide, occupying the frame the way a subject does when it has no idea it is being observed. The green tint is the night-vision cast these cameras produce, and the porch siding and lights behind the animal establish the depth the fisheye lens distorts. The composition is doing real work: the banner is the claim, the circle is the evidence, and the gap between them — motion versus this particular cat — is where the humor lives.

I read the design as a small essay about the difference between a sensor’s report and a human’s interpretation. The notification is technically accurate and completely unhelpful. It tells you a threshold was crossed without telling you whether to care. Anyone who has ever glanced at a phone, seen motion detected, and felt the small spike of alarm before the camera feed resolved into a raccoon or a leaf or a neighbor’s dog knows the feeling the shirt is encoding. The cat is the resolution of that spike. The wide eyes are not menace; they are the animal equivalent of being caught mid-investigation, and the joke is that the system treated this as an event worth waking you for.

There is a craft argument here too, and it is about restraint. The design could have added a second line of text — a caption, a reaction, an emoji — and it would have been worse. The banner already carries the full sentence. The image already carries the reveal. Adding anything would explain the joke instead of letting the viewer complete it. The shirt trusts the reader to recognize the notification format and to supply the missing beat, which is the same trust a good error message extends to an operator: state the condition, show the evidence, stop.

That is why the phrase there is motion at your front door shirt describes a piece of visual shorthand more than a slogan. The wording is plain to the point of being bureaucratic, and that plainness is the point. A slogan tries to persuade. A notification tries to inform. The shirt borrows the second register and lets the first image do the persuading. The result reads less like merchandise and more like a diagram of a moment — the instant a system’s flat report collides with the messy reality it was trying to describe.

The object itself is a standard t-shirt from the Quirky Cotton Collective listing, and the design is what the listing shows: the banner, the bell, the sentence, the green-tinted circular feed, the orange tabby. I am not going to tell you how it wears or how it washes, because I have not worn it and the artwork is the thing worth reading. What I can say is that the composition holds up as a piece of graphic argument: two panels, one claim, one piece of evidence, and a gap the viewer fills. It is a small, well-built joke about the distance between what a sensor reports and what a person understands.

The open question the design leaves is the one every notification system leaves: who decides what counts as motion worth reporting, and who has to interpret the alert when it arrives? The shirt does not answer that. It just shows you the moment before the answer, when the banner is still up and the feed has not yet resolved — and lets you laugh at the gap.

Editorial note: This publication and Quirky Cotton Collective share an owner.

The Word Is Small, the Type Is Not: Reading the ‘meh.’ Shirt

The garment preview shows four letters and a period: meh. They are set in a heavy lowercase sans, white against a dark ground, and they occupy the chest the way a warning label occupies a panel. There is no illustration, no animal, no secondary line of copy. The period is present and it is doing work. This is not a whisper of indifference; it is indifference at billboard scale.

That mismatch is the whole object. A word that means I decline to invest further affect has been given the typographic treatment usually reserved for a band name, a stadium banner, or a compliance notice. The shirt does not ask the reader to agree with the sentiment. It asks the reader to notice that the sentiment has been promoted to a headline.

What the type says that the word does not

Lowercase meh is casual by convention. Lowercase meh in a bold geometric face at large scale is not casual; it is declarative. The letterforms are wide and even, the strokes are uniform, and the period closes the sentence with the flat finality of a status field set to closed. If the same word were set in a thin italic at 12 points, it would read as a shrug. At this weight and size it reads as a policy.

I take that to be the design’s argument, and I want to be careful to call it an interpretation rather than a fact about the designer’s intent. The visual evidence is the weight, the scale, the case, and the terminal period. The inference is that the loudness is the joke. A dismissive word rendered loudly becomes a statement about the performance of dismissal — the difference between feeling unimpressed and announcing it.

The period is the load-bearing element

Strip the period and the shirt says meh, which is a sound. Keep the period and the shirt says meh., which is a verdict. Punctuation is how written language converts a noise into a position. In a work context, that distinction matters more than the word itself: a colleague who says meh is thinking out loud, and a colleague who writes meh. in a review thread has recorded a conclusion.

This is the closest the shirt comes to a professional observation, and I want to keep it modest. The garment is not a lesson in incident response or a diagram of a trust chain. It is a piece of typography that happens to encode a small truth about terse messages: the shortest ones carry the most punctuation weight, because there is nothing else to soften them.

Why the loudness is the useful part

Technical readers spend a lot of time around messages that are deliberately quiet — log lines, status codes, deprecation notices, the single word deprecated in a changelog. The culture rewards understatement. A shirt that takes the most understated word available and sets it in the loudest available type is a small joke about that culture, and it works because the wearer and the reader both know the convention being inverted.

It is also, frankly, a better object than a slogan. Slogans promise something. meh. promises nothing, which is a more honest contract for a piece of clothing. The shirt is available as a standard t-shirt through the Quirky Cotton Collective listing, and the design as observed is exactly what I have described: large bold white lowercase lettering on a dark shirt, no animal illustration, no variant.

What the object leaves open

The unresolved question is not whether the shirt is funny; that is a matter of taste and I have no measurement for it. The question is what the period is doing at the scale it has been given. At small sizes a period is a full stop. At this size it is a graphic element, a dot with the same visual weight as a letter, and it changes the reading from a word to a word and a mark. Whether that reads as deadpan or as aggression depends entirely on the room the wearer walks into — which is, I think, the point the design is making, and the reason it does not need a second line of copy to make it.

Editorial note: this publication and Quirky Cotton Collective share an owner.

The Tiles Spell I W Ti S: Reading the ‘I Wear This Shirt Periodically’ Shirt

The shirt reads I WEAR THIS SHIRT PERIODICALLY in plain caps, and beneath that sentence sit four tiles in the visual grammar of the periodic table: 53 I, 74 W, 22 Ti, 16 S. Read the symbols in order and you get I W Ti S. Read the atomic numbers and you get iodine, tungsten, titanium, sulfur. Neither sequence spells the sentence above it. That gap is the whole design, and it is worth taking seriously as a piece of diagram craft rather than a slogan.

The joke depends on a reader who knows two things at once: that element tiles carry a symbol and an atomic number, and that the word periodically can mean both “at intervals” and “by way of the periodic table.” The shirt does not resolve which reading it intends. It stacks them. The sentence claims a frequency; the tiles claim a chemical spelling; the mismatch between them is the punchline. A viewer who only reads the words sees a mild pun. A viewer who reads the tiles sees a near-miss that is funnier than a clean match would have been.

That near-miss is the design decision I keep returning to. A literal spelling would have required tiles whose symbols concatenate to the sentence, and the periodic table does not cooperate. The designer chose four real elements — iodine, tungsten, titanium, sulfur — and let the symbols approximate the words I wear this without pretending to complete them. The result is a diagram that is honest about its own constraints. It does not fake a symbol to make the joke land. It uses the actual table and lets the reader do the last step.

I find that more interesting than a perfect rebus. A perfect rebus is a closed puzzle: once you solve it, there is nothing left. This shirt leaves a residue. The Ti tile does double duty, standing in for the start of “this” while also being a real element with a real atomic number. The S tile could be the end of “this” or the start of something else. The sentence above the tiles is grammatically complete, but the tile sequence is not, and that asymmetry is what makes the shirt worth reading twice.

There is a work-culture argument buried in that asymmetry, and it is the reason I think this object belongs in a column about how technical readers read diagrams. Engineers spend a lot of time with notations that are almost, but not quite, self-explanatory: a state machine with one transition unlabeled, a config file with a key that looks like it should do something it does not, an error message that names the wrong subsystem. The skill being exercised is not solving the puzzle. It is noticing where the notation stops matching the claim and deciding whether the gap is intentional.

This shirt trains that skill in the most harmless possible setting. The gap between I W Ti S and I WEAR THIS is not a bug. It is the joke. But you have to read the tiles to see it, and reading the tiles requires knowing that W is tungsten and not a word, that Ti is a symbol and not a typo, that 53 and 74 are atomic numbers and not prices or sizes. The shirt assumes a reader who can hold two notations in mind at once and compare them. That is a specific kind of literacy, and it is the same literacy that lets an operator spot a malformed route announcement or a certificate chain that does not quite terminate where it should.

I want to be careful not to overclaim. The shirt does not demonstrate anything about chemistry, and it does not prove anything about the people who wear it. It is a piece of printed apparel with a visual pun on it. But the pun is constructed with enough care that it rewards the same attention we give to any diagram: read the labels, check the sequence, notice where the representation diverges from the sentence it claims to represent. The divergence here is deliberate and legible. That is more than can be said for a lot of diagrams that cross my desk.

The object itself is the I Wear This Shirt Periodically chemistry element-tile pun from Quirky Cotton Collective. The retail title calls it a science pun, which is accurate as far as it goes, but the interesting part is not the pun as a verbal joke. It is the tile arrangement as a small act of notation design: four real elements, four real atomic numbers, a sentence that does not quite match, and a reader who is trusted to notice.

Editorial note: This publication and Quirky Cotton Collective share an owner.

The open question the shirt leaves is not whether the joke works. It does, for the reader it is aimed at. The question is whether the near-miss is the point or a compromise. A designer with a free hand might have invented symbols to spell the sentence exactly. This designer did not. They used the table as it is and let the sentence and the tiles disagree by exactly the amount the table forces. That is a choice about how much to fake for the sake of a clean result, and it is the same choice that shows up in every notation system where the underlying reality refuses to line up with the label. The shirt is a small, wearable reminder that the gap is often where the information is.

The Symantec Wind-Down: How a Browser Root Program, Not the CA/B Forum, Regulated the WebPKI

The mechanism was the message

On March 23, 2017, a Google engineer posted to the blink-dev mailing list under the subject line “Intent to Deprecate and Remove: Trust in existing Symantec-issued Certificates.” The post was not a standards proposal. It was a notice of enforcement, with a schedule attached. That distinction matters more than the eventual outcome, because it tells you where authority over the WebPKI actually sits.

The post, by Ryan Sleevi, laid out three levers: a cap on the validity period of newly issued Symantec certificates at nine months or less; an incremental distrust of existing Symantec-issued certificates across a series of Chrome releases; and removal of Extended Validation status for Symantec-issued certificates for at least a year (blink-dev thread). Each lever operated on the client side. None required a CA/Browser Forum ballot. None amended the Baseline Requirements. The operative instrument was the trust store.

What the proposal actually said

The evidentiary core of the post was a claim about scope. The Chrome team said it had been investigating Symantec since January 19, and that “an initial set of reportedly 127 certificates has expanded to include at least 30,000 certificates, issued over a period spanning several years.” The post attributed the expansion to Symantec’s explanations under questioning, not to independent discovery by Google.

The post also made a structural allegation: “Symantec allowed at least four parties access to their infrastructure in a way to cause certificate issuance, did not sufficiently oversee these capabilities as required and expected, and when presented with evidence of these organizations’ failure to abide to the appropriate standard of care, failed to disclose such information in a timely manner.” That is a claim about governance of the issuance pipeline, not about any single misissued certificate.

The compatibility argument was explicit. Symantec-issued certificates had represented “more than 30% of the valid certificates by volume” in January 2015, and the post acknowledged that immediate distrust would impose costs on site operators, particularly those supporting older devices. The phased schedule was a deliberate trade: security urgency against migration time.

The schedule as a governance instrument

The distrust was not keyed to issuance date in the March proposal. It was keyed to certificate age. The mechanism, as described in the post: “gradually decreasing the ‘maximum age’ of Symantec-issued certificates over a series of releases, distrusting certificates whose validity period (the difference of notBefore to notAfter) exceeds the specified maximum.”

The proposed ladder ran from 33 months in Chrome 59 down to 9 months by Chrome 64, with a deliberate pause at Chrome 63 Stable to avoid the winter holiday production freeze. That detail is worth pausing on. A root program was scheduling trust changes around enterprise change-management calendars. That is regulator behavior, whether or not anyone used the word.

The post also stated plainly that this was a departure from normal practice: “Historically, the Google Chrome team has not used the Blink Process for Certificate Authority-related security issues… However, we are interested in exploring using this process for such changes, as it provides a greater degree of transparency and public participation.” The transparency channel was discretionary. The trust store was not.

The implementation artifact

The December 2017 Chromium commit that implemented phase one is more instructive than the proposal, because it shows what “distrusting a CA” actually means in code. The commit message states: “All new certificates issued from the legacy Symantec infrastructure – excluding those CAs above and the pre-existing independent sub-CAs – issued on or after 2017-12-01 are not trusted” (Chromium commit bd9ca31).

The exclusions are the interesting part. DigiCert Global Root G2 and G3 were “treated as indepedently operated sub-CAs, as they were CAs already trusted on Chrome and Android, despite having been recently cross-signed by the legacy Symantec infrastructure.” The DigiCert Transition RSA and ECC roots were “treated as Managed Sub-CAs, subject to the Managed Partner Infrastructure policies,” with all certificates from those roots required to be CT Qualified.

This is not a binary switch. It is a set of scoped, negotiated technical decisions about which roots inherit which obligations. The commit also notes that the changes were not included in Android WebView, where trust propagates via system updates or the Google Play Services security provider. The same policy, applied to a different client, travels through a different governance path.

The scope dispute, as a dispute

Symantec’s public response, as reported by TechTarget, rejected the 30,000 figure: “Google’s claim that we have misissued 30,000 SSL/TLS certificates is not true. In the event Google is referring to, 127 certificates — not 30,000 — were identified as misissued, and they resulted in no consumer harm” (TechTarget, March 24, 2017). Symantec called Google’s actions “irresponsible” and accused it of singling out the CA.

Neither figure is a finding. Both are party assertions. What the exchange does establish is an asymmetry in the process: the root program controls the investigation, the evidence-gathering questions, and the enforcement timetable. The CA responds in public, under deadline pressure, to a schedule it did not set.

The Mozilla side of the same period shows a similar dynamic with a different tempo. TechTarget reported that Gervase Markham set a one-week deadline for Symantec responses to a list of 14 issues, then extended it to April 20 after objections about the Easter holiday (TechTarget, April 12, 2017). The deadline was a root-program instrument, not a Forum ballot.

What the Forum did, and did not, do

The CA/Browser Forum is where the Baseline Requirements are written. It is not where this enforcement happened. The retrieved record does not show a Forum ballot authorizing the Symantec distrust, and the proposal itself did not route through the Forum. The Forum minutes from June 2018 record Google’s report that “Chrome 68 distrusted the first wave of Symantec certificates according to the announced distrust plan. Chrome 70 will address the following waves” (CA/B Forum F2F 44 minutes). The Forum was the venue where the root program reported what it had already done.

The same minutes record Apple’s parallel action: “Phase 1 is in beta builds and this will distrust Symantec issued TLS server certificates issued before June 1, 2016 and after December 1, 2017. Phase 2 is coming, but no details were provided.” Apple’s phase boundaries differ from Chrome’s. The two root programs were not executing a shared plan; they were each enforcing their own trust decisions on their own schedules.

The March 2017 proposal had already flagged this divergence: “Assessing the compatibility risk with both Edge and Safari is difficult, because neither Microsoft nor Apple communicate publicly about their changes in trust prior to enacting them.” The WebPKI, in practice, is not one regulator. It is several root programs whose decisions a site operator must satisfy simultaneously, with different transparency norms.

Why the phased-by-validity design matters

The choice to distrust by certificate age rather than issuance date is a governance choice as much as a security one. It converts a trust judgment into a migration deadline that site operators can plan around. A certificate issued in 2016 with a three-year validity would survive longer than one issued in 2017 with the same validity, because the clock ran from notBefore. The schedule was published in advance, release by release, so that operators could map their renewal cycles onto it.

That is a different instrument from a revocation. Revocation is a per-certificate action, mediated by OCSP and CRLs, and it is notoriously unreliable in practice. A validity cap enforced at the client is a policy that applies to every certificate in scope, regardless of whether any revocation infrastructure cooperates. It is also harder to reverse quietly. The commit is public, the schedule is public, and the carve-outs are visible in the code.

What the case does and does not establish

It establishes that a browser root program can set and enforce trust policy for a CA without a Forum ballot, on a published schedule, with scoped technical exceptions negotiated in code. It establishes that the transparency channel for such decisions is discretionary, as the proposal itself said. It establishes that cross-browser divergence is real and that site operators bear the cost of satisfying multiple root programs.

It does not establish that the 30,000 figure was correct, or that the 127 figure was correct. It does not establish what Mozilla ultimately decided, because the Mozilla wiki page was not retrievable for this piece. It does not establish the terms or closing date of the DigiCert acquisition of Symantec’s website security business, because the DigiCert release was not retrievable. It does not establish any market outcome, revenue effect, or consumer harm finding. Those are gaps, not conclusions.

The proposal itself acknowledged the compatibility cost: site operators forced to migrate without time to research alternatives, users encountering errors, and the risk that “the error is often seen as the browser’s fault, despite it being a failure of the CA to provide the necessary level of assurance.” That is the unresolved question the case leaves behind. A root program can act as regulator. Whether it can do so while bearing the legitimacy costs of a regulator — due process, consistent evidentiary standards, and accountability for the compatibility costs it imposes — is a question the Symantec wind-down raised but did not answer.

FAQ

Did the CA/Browser Forum authorize Chrome’s distrust of Symantec?

The retrieved record does not show a Forum ballot authorizing the distrust. The March 2017 proposal was posted to blink-dev, not routed through the Forum, and the June 2018 Forum minutes record Google reporting the distrust as an accomplished fact.

How did the phased distrust work?

Chrome lowered the maximum accepted certificate age over a series of releases, distrusting Symantec-issued certificates whose validity period exceeded the cap. The proposed ladder ran from 33 months in Chrome 59 to 9 months by Chrome 64, with a pause at Chrome 63 Stable for the holiday production freeze.

What happened to DigiCert roots in the transition?

The December 2017 Chromium commit treated DigiCert Global Root G2 and G3 as independently operated sub-CAs, exempt from the Symantec-specific CT requirement, and treated the DigiCert Transition RSA and ECC roots as Managed Sub-CAs subject to Managed Partner Infrastructure policies.

Did other browsers follow the same schedule?

No. Apple’s Phase 1, as recorded in the June 2018 Forum minutes, distrusted Symantec-issued TLS server certificates issued before June 1, 2016 and after December 1, 2017, with Phase 2 to come without details provided. The phase boundaries differ from Chrome’s.

The Period Is the Whole Argument: Reading the Lowercase ‘meh.’ Shirt

On a dark shirt, centered, in lowercase, sits a single word: meh. The lettering is very small — small enough that the garment reads as blank from across a room and only resolves into language at conversational distance. There is no animal illustration. There is no pride variant, no rainbow, no mascot. The native garment preview shows the word and the period and the dark field around them, and that is the entire design.

I want to argue that the period is doing most of the work, and that the scale is doing the rest. This is not a slogan shirt. It is closer to a boundary marker, and the difference matters for anyone who has ever tried to write a status message, a maintenance notice, or a one-line refusal that has to survive contact with an organization.

What is actually printed

Start with the literal observation, because the retail prose around this listing is looser than the artwork. The preview shows lowercase meh. — four letters and a full stop — centered on a dark garment. The word is set small relative to the chest area. No other graphic element is visible in the native preview. The listing title mentions sarcasm, introversion, and minimalism, but those are marketing categories, not printed content. What is printed is one word and one punctuation mark.

The shirt is sold by Quirky Cotton Collective under the title Meh Funny Sarcastic Introvert Minimalist Saying. The design decision recorded in the listing metadata is explicit: minimal small lowercase typography, no animal or pride variant. That matches what the preview shows. I am reading the artwork, not the adjectives.

The period changes the speech act

Strip the period and you have meh — an interjection, a shrug, a sound. It is ambient. It could be a reaction to a question, a review of a sandwich, a mood. It belongs to conversation and it evaporates when the conversation ends.

Add the period and the word becomes a sentence. A one-word sentence, but a sentence: subject implied, predicate supplied by context, terminal punctuation closing it off. The period is the difference between a noise and a verdict. In writing about protocol behavior I have learned to watch terminal punctuation the way I watch a FIN or a RST in a packet capture — it tells you whether the exchange is finished or merely paused. The period on this shirt says finished. It does not invite a follow-up question. It does not leave the channel open for negotiation.

That is a specific and useful thing for a garment to do, and it is not the same as sarcasm. Sarcasm implies a gap between what is said and what is meant, and it usually wants an audience to appreciate the gap. meh. with a period does not perform for an audience. It closes. The humor, such as it is, comes from the mismatch between the effort of punctuation and the indifference of the word — the way a formal closing gesture gets applied to a content-free message.

Scale is the second argument

The lettering is small. On a dark shirt, small centered type reads as a detail rather than a declaration. This is the opposite of how slogan shirts usually work: they maximize type size so the message carries across a room, because the message is the product. Here the message is deliberately undersized. You have to be close to read it. The shirt withholds its content from the crowd and releases it to the individual.

I read that as a design choice with a social consequence, not just an aesthetic one. A large slogan recruits bystanders into an argument. A small one makes the wearer the gatekeeper of when the argument starts. The word is there, but it is not being broadcast. That is a coherent position for a design that also declines to include an animal mascot or a flag: it refuses the visual grammar of affiliation. There is no tribe signaled by this shirt. There is a mood, stated once, at low volume, and then a period.

I should be careful here. I am interpreting a visual choice, not reporting a measured effect. I have not worn this shirt, and the listing does not document how it reads in daylight or at distance. What I can say is what the preview shows: small, centered, lowercase, dark ground, no illustration. The interpretation that follows is mine, offered as a reading rather than a finding.

Why a technical reader might care

The readers I write for spend a lot of time composing short messages that have to do precise social work: deprecation notices, incident updates, review comments, boundary-setting replies on mailing lists. The hardest of these are the ones that must close a thread without escalating it. You want to end the exchange, not win it. You want a terminal state, not a flame war.

meh. is a comic miniature of that problem. It is a one-word message with a deliberate terminal marker, and its humor comes from how badly the terminal marker fits the content. A period after a shrug is overkill, and the overkill is the joke. But the joke is also a small lesson in register: punctuation is a control surface. It tells the reader what kind of exchange they are in and whether it is still open. Most of the bad messages I see in technical contexts fail not because the content is wrong but because the register is wrong — a closing period where a question mark was needed, or an open-ended tone where a hard stop was required.

I am not claiming the designer had incident communication in mind. I am claiming the object is legible to people who do that work, because it isolates one variable — terminal punctuation — and lets you feel its weight. That is what a good diagram does too. It removes everything that is not the argument.

The refusal of the mascot

The listing metadata notes that this design has no animal or pride variant. That negative detail is worth taking seriously. A great deal of print-on-demand humor depends on a mascot — a sloth, a cat, a frog — to carry the joke, because the mascot supplies warmth and gives the buyer a shareable image. This design declines that route. It also declines the pride variant, which in the current market is often the same word with a flag behind it. Neither is present. The word stands alone on the dark field.

I read that as a kind of minimalism that is not merely stylistic. Adding a mascot would convert the sentence back into a character — a personality you can identify with, a mood you can attribute to a cute animal. Adding a flag would convert it into a position. The bare word with its period stays a statement without a speaker. It is the difference between a status and a persona. For a shirt, that is an unusual and slightly austere choice, and it is the reason the design holds up under description: there is almost nothing to describe, so the description has to be exact.

What the shirt does not do

It does not cure anything, improve anyone’s mood, or signal membership in a community. It does not demonstrate a software result or a security property. It is a piece of printed cloth with four letters and a period on it. The temptation in writing about an object like this is to inflate it into a thesis about modern alienation, and I want to resist that. The shirt is funny in a dry way, and its dryness is legible to people who spend their days trying to make short messages behave. That is enough of an argument. Anything more would be me adding a mascot of my own.

The open question

The question the artwork leaves is about scale and legibility as control surfaces. If a message is small enough that only the person in front of you can read it, who is the message for? The wearer has chosen a design that withholds its content from the room and releases it to the individual, and the period closes the exchange before it starts. That is a coherent social move, but it is also a fragile one: it depends on the reader being close enough, and on the wearer being willing to be read. The shirt states a terminal position at low volume and then stops. Whether that reads as confidence or as retreat is not settled by the artwork. It is settled by whoever is standing close enough to see the period.

Editorial note: This publication and Quirky Cotton Collective share an owner. This is an owner-authorized column, not an independent review.

« Older posts