3 ms·
A self-signed certificate still has the revocation problem, though.
by dvanduzer 12y ago
A self-signed certificate still has the revocation problem, though.
- AnthonyMouse 12y agoAll certificates have the revocation problem. The revocation mechanisms have serious performance and reliability issues (e.g. what do you do if you can't contact the server?) which means that hardly anybody uses them and most people who do are doing it wrong.
- dvanduzer 12y agoSomewhat short lived certificates (two weeks?) solve most problems around online revocation. But on that timescale a self signed isn't terribly convenient, so you still need some kind of issuing authority / infrastructure.