3 ms·
Genuine question: what's the big deal of using custom CA?
by devy 10y ago
Genuine question: what's the big deal of using custom CA?
- jeremyjh 10y agoNothing, if you know your intended users will have that CA's root in their trust store, as the NSA likely does. A self-signed certificate is one generated on the hosting device itself - the actual webserver hosting the site - there is no chain of trust to a root certificate that could be in someone's trust store and consequently no way to know if there is a man-in-the-middle.
- dogma1138 10y agoSelf signing allows you to counter mitm just fine as you trust a specific certificate. A trust allows you to manage revocation easily and it doesn't requires you to trust 100's or 1000's of certificates independently.