3 ms·
> So, all this is to get an encrypted connection? This strikes me as odd too. What's the difference between an automated SSL certificate generator and just ha
by runeks 12y ago
> So, all this is to get an encrypted connection?
This strikes me as odd too.
What's the difference between an automated SSL certificate generator and just having the browser accept self-signed certificates?
openssl is also an automated SSL certificate generator, but it only produces self-signed certificates. So why not just accept self-signed certs?
- johnsoft 12y agoThe difference is in the certificate chain. One of the conditions for being a CA is verifying domain ownership before signing a certificate. In return for this, browsers will trust their cert. As long as a CA keeps this promise, they get to keep their cert and use it to sign certs for others. If they break this promise, their cert will be revoked and browsers will start showing warnings on sites that used them as a CA. A green padlock indicates this additional level of trust, i.e. authenticity (verified through any method any trusted CA may choose), which a self-signed cert can't provide.