3 ms·

Be security conscious folks. Don't click through to a site with a self-signed cert.

by geuis 13y ago

hadoukenio 13y ago
There is nothing wrong with self-signed certificates. If you need to trust a website that uses self-signed certificates, just make sure to verify out-of-band.
- ScottWhigham 13y ago
  Yes, I trust my own self-signed certs and I might trust the self-signed certs of certain sites. However, telling me that "There is nothing wrong with self-signed certificates." is irresponsible IMO. Who runs "peereboom.us"? #### if I know. I'm going to tell FF "It's okay - I'm good" this time b/c I'm not doing anything that matters but, as a rule, self-signed certs for unknown sites is not okay.
  - ghshephard 13y ago
    Would you trust visiting a site that's just HTTP? Self signed certs for unknown sites are fine. There is zero problem visiting them.
    - hadoukenio 13y ago
      @ScottWhigham I'm not being irresponsible. I'm with ghshephard on this one.
    - markwakeford 13y ago
      ahmen
  - lkd 13y ago
    Self-signed certs are OK in every scenario that HTTP would be OK, and then some.
- kzrdude 13y ago
  There are two problems in Firefox: * The excepted site displays the exact same padlock icon as hacker news for example * "Add exception permanently" is selected by default.
  - hadoukenio 13y ago
    What does that have to do with self-signed certificates in general rather than an issue with your particular browser?
RyanZAG 13y ago
Huh? All it means is that the site you are trying to visit may be an imposter. Since you don't even know who the site is in the first place, does it matter to you if someone is impersonating that site? Of course not. Feel free to accept the self-signed cert, there is no security worries there. If you go to your bank's website - or anything at all with private data - then you need to make sure it isn't self signed.
dfc 13y ago
Here, this should be way less scary for you: http://web.archive.org/web/20140125144231/http://www.peereboom.us/assl/assl/html/openssl.html http://web.archive.org/web/20140125144231/http://www.peerebo...
noselasd 13y ago
But you would probably click through it if it was plain http.

Be security conscious folks. Don't click through to a site with a self-signed cert.

by geuis 13y ago

Be security conscious folks. Don't click through to a site with a self-signed cert.

There is nothing wrong with self-signed certificates. If you need to trust a website that uses self-signed certificates, just make sure to verify out-of-band.

ScottWhigham 13y ago
Yes, I trust my own self-signed certs and I might trust the self-signed certs of certain sites. However, telling me that "There is nothing wrong with self-signed certificates." is irresponsible IMO. Who runs "peereboom.us"? #### if I know. I'm going to tell FF "It's okay - I'm good" this time b/c I'm not doing anything that matters but, as a rule, self-signed certs for unknown sites is not okay.
- ghshephard 13y ago
  Would you trust visiting a site that's just HTTP? Self signed certs for unknown sites are fine. There is zero problem visiting them.
  - hadoukenio 13y ago
    @ScottWhigham I'm not being irresponsible. I'm with ghshephard on this one.
  - markwakeford 13y ago
    ahmen
- lkd 13y ago
  Self-signed certs are OK in every scenario that HTTP would be OK, and then some.
kzrdude 13y ago
There are two problems in Firefox: * The excepted site displays the exact same padlock icon as hacker news for example * "Add exception permanently" is selected by default.
- hadoukenio 13y ago
  What does that have to do with self-signed certificates in general rather than an issue with your particular browser?

RyanZAG 13y ago

Huh? All it means is that the site you are trying to visit may be an imposter. Since you don't even know who the site is in the first place, does it matter to you if someone is impersonating that site? Of course not. Feel free to accept the self-signed cert, there is no security worries there. If you go to your bank's website - or anything at all with private data - then you need to make sure it isn't self signed.

dfc 13y ago

Here, this should be way less scary for you: http://web.archive.org/web/20140125144231/http://www.peereboom.us/assl/assl/html/openssl.html http://web.archive.org/web/20140125144231/http://www.peerebo...

noselasd 13y ago

But you would probably click through it if it was plain http.