4 ms·
Self signed certificates really aren't good enough for encryption, unless you're doing TOFU before the MITM happens. Otherwise the evil MITM can decrypt the tr
by BenjiWiebe 1y ago
Self signed certificates really aren't good enough for encryption, unless you're doing TOFU before the MITM happens.
Otherwise the evil MITM can decrypt the traffic, modify/inspect it, and re-encrypt it with their own self-signed certificate, and you're none the wiser.
- gmuslera 1y agoThe encryption is ok, but you are not talking with the right party.