5 ms·
This is great. If a state funded threat is in your network in the position to place a certificate on a server do you think your self signed certificate will pro
by StreamBright 7y ago
This is great. If a state funded threat is in your network in the position to place a certificate on a server do you think your self signed certificate will protect you?
- geggam 7y agoThink of it as a cost and effort threshold. Prevents the dragnet / fishing methods from eavesdropping. It's trivial to force $Company to let you in with letter. The effort to break encryption is not trivial. You have to be doing something wrong to get specific attention.
- StreamBright 7y agoI mean if you use cert pinning with a public CA you get the same results, aka you can easily spot MITM. I am generally not a big fan of private CAs.