5 ms·
Then generate your own certs and self-sign.
by gthank 17y ago
Then generate your own certs and self-sign.
- axod 17y agoStill pops up warnings for users in browsers.
- chowmeined 17y agoAs they should. Since there is no way to verify the remote server then the connection is vulnerable to man-in-the-middle attacks. In that situation an attacker can simply pretend to be the server and decrypt your traffic.
- jcl 17y agoAs I understand it, self-signed certs leave you open to man-in-the-middle attacks. http://news.ycombinator.com/item?id=277284 http://news.ycombinator.com/item?id=277284