4 ms·
That's definitely the wrong definition. A self-signed certificate is a certificate that is signed by the private key corresponding to the public key contained i
by poizan42 3y ago
That's definitely the wrong definition. A self-signed certificate is a certificate that is signed by the private key corresponding to the public key contained in that certificate - in other words it's signed by itself.
In fact every CA root are by necessity self-signed and therefore signed by a CA (i.e. itself)
- Dylan16807 3y agoI don't think they were talking about certificates that were also CAs. It's not wrong, it's insufficiently precise. Anyway, your definition is clearer, but it still supports the point I was trying to make. You don't "add your CA" in order to use self-signed certs. You do that to use a private CA that will sign all your certs. And doing so only allows you to use websites you signed, not websites other people signed. It would be a terrible idea to add anyone else's CA, and you can't easily use your CA to slap your signature onto websites other people signed. Adding your own CA is a completely different situation from trying to visit a self-signed site.