3 ms·
What benefits does a self-signed certificate give over plain HTTP? They don't prevent MITM injection, which is the thing you raised in other thread.
by int_19h 1y ago
What benefits does a self-signed certificate give over plain HTTP? They don't prevent MITM injection, which is the thing you raised in other thread.
- vaylian 1y agoThe visitor can import the self-signed certificate, so that it becomes trusted and after that MITM won't be possible without certificate errors. However, this won't help if the certificate is already forged the first time the visitor connects to the site.
- sneak 1y agoThis assumes that passive attacks and active attacks are the same. Self-signed doesn’t protect against active MITM, as you note. It does protect against passive attacks, in providing privacy against eavesdropping and resistance to packet/content injection on the LAN.