3 ms·
Nothing, if you know your intended users will have that CA's root in their trust store, as the NSA likely does. A self-signed certificate is one generated on
by jeremyjh 10y ago
Nothing, if you know your intended users will have that CA's root in their trust store, as the NSA likely does.
A self-signed certificate is one generated on the hosting device itself - the actual webserver hosting the site - there is no chain of trust to a root certificate that could be in someone's trust store and consequently no way to know if there is a man-in-the-middle.
- dogma1138 10y agoSelf signing allows you to counter mitm just fine as you trust a specific certificate. A trust allows you to manage revocation easily and it doesn't requires you to trust 100's or 1000's of certificates independently.