2 ms·
with a properly done CSR (certificate signing request), a CA never has access to your private key, therefore cannot "give it to someone else"
by throwaway2048 13y ago
with a properly done CSR (certificate signing request), a CA never has access to your private key, therefore cannot "give it to someone else"
- joshstrange 13y agoCorrect, they cannot give but they can sign a new key for your domain which the attacker can use.