4 ms·
Arguably self signed certs eliminates possible state funded middle man attacks making it more secure
by geggam 7y ago
Arguably self signed certs eliminates possible state funded middle man attacks making it more secure
- clhodapp 7y agoAs a technology, properly-implemented self-signed certs are totally fine. The problem is that k8s does not have the features necessary to use self-signed certs securely. Instead, it expects you to create your own CA (or CAs: you can use separate ones for different kinds of communication if you want extra bulkheads) and then to share out your private CA's cert to all the k8s components. This achieves your goal of cutting out MITM attacks via unscrupulous commercial CAs while also making it possible to trust families of certs for a given purpose, rather than having to whitelist every single consumer's private key.
- StreamBright 7y agoThis is great. If a state funded threat is in your network in the position to place a certificate on a server do you think your self signed certificate will protect you?
- geggam 7y agoThink of it as a cost and effort threshold. Prevents the dragnet / fishing methods from eavesdropping. It's trivial to force $Company to let you in with letter. The effort to break encryption is not trivial. You have to be doing something wrong to get specific attention.
- StreamBright 7y agoI mean if you use cert pinning with a public CA you get the same results, aka you can easily spot MITM. I am generally not a big fan of private CAs.