4 ms·
Will browsers start allowing self signed certificates though?
by brnt 6y ago
Will browsers start allowing self signed certificates though?
- randall 6y agoNo... web of trust is an important aspect to https.
- AlexandrB 6y agos/web of trust/centralization/
- judge2020 6y agos/centralization/validating ownership Without centralization I can MITM at the coffee shop and steal passwords.
- yjftsjthsd-h 6y agoWoT would fix that, unless the other coffee shop patrons have (directly or indirectly) trusted you.
- cpach 6y agoAs long as you first create a root certificate then you can create how many certificates you want.
- dingaling 6y agoAssuming non-chained root CAs remain trusted. I can forsee the browsers eventually treating self-created CAs like they currently treat self-signed certs. if they're not traceable to a trusted root CA then there's no accountability, from a browser perspective, in the event of abuse or breach.
- chongli 6y agoThen people will create their own root CA and use it to sign the existing root CAs. Whatever it takes. Corporate users need internal certificates.
- zozbot234 6y agoAren't they allowed already, with a click-thru warning screen? And you can also choose to trust them permanently, aka trust on first use.
- tptacek 6y agoSelf-signed certificates are insecure, so, no.
- csunbird 6y agoThey should at least allow for local addresses