4 ms·
What about self-signed certificates? That's still better than plain HTTP.
by vaylian 1y ago
What about self-signed certificates? That's still better than plain HTTP.
- int_19h 1y agoWhat benefits does a self-signed certificate give over plain HTTP? They don't prevent MITM injection, which is the thing you raised in other thread.
- vaylian 1y agoThe visitor can import the self-signed certificate, so that it becomes trusted and after that MITM won't be possible without certificate errors. However, this won't help if the certificate is already forged the first time the visitor connects to the site.
- sneak 1y agoThis assumes that passive attacks and active attacks are the same. Self-signed doesn’t protect against active MITM, as you note. It does protect against passive attacks, in providing privacy against eavesdropping and resistance to packet/content injection on the LAN.