3 ms·
> HTTPS gives you no guarantees that the license server you think you are talking to is the real license server What? This is the entire purpose of HTTPS! To d
by speedplane 7y ago
> HTTPS gives you no guarantees that the license server you think you are talking to is the real license server
What? This is the entire purpose of HTTPS! To do this securely:
1 - you create your server;
2 - you tell a certificate authority (like Symantec, Digicert, or Let's Encrypt) how to find your server, and they do the diligence to make sure you're not trying to redirect another person's server;
3 - they provide you with a private encryption key and expose the public decryption key;
4 - you save the encryption key on your server.
Now, anyone who receives any information from your server can be sure that it came from you because (a) your server is the only one with the encryption key and (b) we trust Symantec, Digitcert, etc to distribute the public decryption key.