4 ms·
The university I work for uses Self-signed certs for everything but ssl. Apparently setting up properly signed certs is too expensive. And it's more effective t
by gerbal 12y ago
The university I work for uses Self-signed certs for everything but ssl. Apparently setting up properly signed certs is too expensive. And it's more effective to have the IT staff spend an inordinate amount of time convincing end-users that the warnings about invalid certs from various applications are nothing to worry about (I'm looking at you Andoid and OSX).
- 13throwaway 12y agoAre you being sarcastic or do you really think they are nothing to worry about? If people just accept any cert they see anyone could just mitm them with a self signed cert.
- gerbal 12y agoI'm being sarcastic. Also some departments use different self-signed certs than the university at large. Not a great situation.
- anaphor 12y agoCouldn't they distribute the signatures to the faculty and students in some semi-secure way?