3 ms·
This doesn't make sense unless you use the CA for something in addition / more critical for HTTP. Sure, you could leak said CA, but it's only going to leave yo
by ownagefool 3y ago
This doesn't make sense unless you use the CA for something in addition / more critical for HTTP.
Sure, you could leak said CA, but it's only going to leave you in the same position as HTTP.
- NegativeK 3y agoYou can generate CA certs that are only allowed to sign certs for specific domains, but _nothing_ respects that self limitation. That means that if the CA keys get out, someone could use it to sign their own cert for google.com, [mybank].com, or [mypasswordmanager].com. Every device with my CA cert on it will trust those.
- ownagefool 3y agoThat's a fair point.