3 ms·
Why tie identity to encryption? Just have a self signed certificate not show a lock icon, or some new icon that represents encryption but not independently conf
by chrisbolt 16y ago
Why tie identity to encryption? Just have a self signed certificate not show a lock icon, or some new icon that represents encryption but not independently confirmed identity.
- wcoenen 16y agoBecause the value of encryption is significantly reduced if you don't know who you are talking to. How do you know you're not talking to a man in the middle?
- JoachimSchipper 16y agoYou don't. I agree that self-signed certificates are mostly useless (although stuff like the perspectives extension to Firefox might help in verification, and at least you can be sure that you are still talking to the same server), but that does not it's worse than a plain HTTP connection.