4 ms·
If I'm verifying the fingerprint of the server's certificate, is that not doing the same thing that the chain of trust would be doing?
by moobot 16y ago
If I'm verifying the fingerprint of the server's certificate, is that not doing the same thing that the chain of trust would be doing?
- tptacek 16y agoNobody is really verifying the fingerprint of the server's certificate, but if you are, fine; you and I are talking about two different issues. You're talking about your own homebrew setup that uses the SSL protocol and manual certificate verification (incidentally, just set up your own CA and forget about the fingerprints; it's not hard). I'm talking about Internet-scale secure web connections to banks.