5 ms·
Uhm. No... he's right. In the browser world.. A a rouge CA, I could generate a certificate pair for https://google.com https://google.com and your web browser
by Daviey 10y ago
Uhm. No... he's right.
In the browser world.. A a rouge CA, I could generate a certificate pair for https://google.com https://google.com and your web browser would trust it.
The same is true with this setup... the solution, for this is to be your own CA and add the CA to all of your clients, rather than adding all of your clients to the server. So this reverses the problem, which for many should be easier.
(I honestly can't see anyone using a public CA for this.. it would be nuts)
- awqrre 10y agoYou might be surprised to see the nut things people would do for convenience... but in this case you are probably right as the average computer user probably don't use SSH.