3 ms·

Even if you do that, are certificates validated against a meaningful list of valid root certificates? (I can't imagine any being practical other than the operat

• tartboogers 9y ago
  He supplies his own. In situations where you control both endpoints, this is far more secure than trusting system CA certificates (which include all manner of foreign government and third-party certificates, including some from companies that have been known to issue intermediate CA certificates to third-parties, a big no-no). After investigating further, it seems that doing manual verification is unnecessary, since Qt does verification during the handshake so long as the default verification mode is used (or the setting to force both server and client verification is used).
  • justinclift 9y ago
    Yeah, we're the developers and maintainers of a popular Open Source database GUI: http://sqlitebrowser.org http://sqlitebrowser.org We're creating a "cloud" (will be at https://dbhub.io https://dbhub.io) for people to share/store/collaborate/publish/etc data in SQLite format. Kind of niche, but it should be really helpful for places needing to version+collaborate on (non huge) reference data sets. There's a live dev server here if that's of interest: https://dev1.dbhub.io/justinclift/Belfast%20Bikes%20Docking%20Stations.sqlite https://dev1.dbhub.io/justinclift/Belfast%20Bikes%20Docking%... Note - that page shows the expected look and feel. We have no real front page at the moment - it's just a list of public databases that have been uploaded for now - but that'll change as some other bits are completed. :)