4 ms·
>HTTPS is about securing the connection to the website and NOT about identifying the website. Unfortunately, it's both. Otherwise we would have had widespread
by swebs 8y ago
>HTTPS is about securing the connection to the website and NOT about identifying the website.
Unfortunately, it's both. Otherwise we would have had widespread encrypted connections decades ago. I'm not sure why browsers decided that no encryption is just fine, but encryption with a self-signed certificate triggers warnings that it's the end of the world.
- lordlimecat 8y agoBecause negotiated encryption is useless if you can't be sure you're talking to the right person. If you are using a self-signed cert with an unknown thumbprint, how does the other side know you aren't a MITM attacker?