28 ms·
They aren't "self-signed", they're signed by the DoD certificate authorities (which probably requires more paperwork and due diligence than getting a certificat
by jlgaddis 10y ago
They aren't "self-signed", they're signed by the DoD certificate authorities (which probably requires more paperwork and due diligence than getting a certificate issued by GoDaddy, Comodo, etc.).
- nickpsecurity 10y agoIndeed: http://www.disa.mil/~/media/Files/DISA/Services/UCCO/APL-Process/UC_DoD_PKI_Guide.pdf http://www.disa.mil/~/media/Files/DISA/Services/UCCO/APL-Pro... For high-security (esp Type 1), they're also a system for generating and managing keys that the NSA controls: https://en.wikipedia.org/wiki/EKMS https://en.wikipedia.org/wiki/EKMS