4 ms·
I don't see it follows. If anything, self-signed certs just make it easier for the NSA (or anyone else) to capture your traffic. Organizations should probably s
by flomo 13y ago
I don't see it follows. If anything, self-signed certs just make it easier for the NSA (or anyone else) to capture your traffic. Organizations should probably set up their own CA instead.
- Arnor 13y agoA CA outside the reach of the NSA would be really valuable right now. A free CA outside the reach of the NSA would save the world.
- fab13n 13y agoThat's what we meant. IIRC you can't even use a self-signed certificate directly for authentication: you have to create your own self-signed root CA, then use it to sign you authentication certificate. The point is, if what you do interest the US government, it can compel Verisign and the likes to betray your trust, so you shouldn't trust them. And what emerges progressively is that the threshold beyond which you're deemed "interesting" by US administrations is way lower than long believed. If you're a company doing international business, you want to secure your strategic communications with your own root CA, not with that of a company who can't say no to the government.