3 ms·
Couldn't I just stand up a quick CA with easyrsa scripts?
by nimbius 3y ago
Couldn't I just stand up a quick CA with easyrsa scripts?
- JoshTriplett 3y agoYes, absolutely. Nobody else will trust it, but you can always set up your own CA for use by computers you use. Which is fundamentally still better than insecure HTTP, because it's at least possible to take steps to trust it and make sure it's the same server you expect to talk to.
- superkuh 3y agoMy typical website's visitor is someone on the other side of the earth I don't know and will never know. Getting my root cert in their trust store just isn't a feasible option in this extremely common use case for a public website.