4 ms·
The CA doesn't have/or need your private key. It works by signing your public key with its private key, thus affirming that you are whom you say you are. Think
by nivla 13y ago
The CA doesn't have/or need your private key. It works by signing your public key with its private key, thus affirming that you are whom you say you are. Think of it as getting a recommendation letter from your professor with his signature. Public and Private keys are also cryptographically related to each other, so a change in one will affect the other.
- jiggy2011 13y agoI mean , they do have their own private keys. So anyone with access to a CA's private key can pretend that they are that CA.
- marcosdumay 13y agoYes, but they can't pretend that they are the company you are talking to... Or at least they'll leak enough information to get caught if they do that in a massive way.
- jiggy2011 13y agoThey can if they simply sign a cert that is identical in all but public key.