3 ms·
The HTTPS connection uses a self-signed cert?
by pionar 11y ago
The HTTPS connection uses a self-signed cert?
- josteink 11y agoIf you want to advocate true freedom and true trust, why not? The CA model is certainly broken and can be hijacked/intercepted by NSA and friends. I think it makes sense.
- pionar 11y agoSo, I'm supposed to trust someone I've never heard of, and just take their word for it? The fact that the site allows one to enter credit card details over plain HTTP would be my first clue not to trust this cert.
- witty_username 11y agoAnybody could intercept the connection with an unsigned connection. At least they could have used HSTS so that only the first visit is vulnerable. If you have a signed cert the NSA has to work harder; there are more logs and it's more riskier for them.