News for hackers. Stuff that matters.

A comment on Encrypted web traffic now exceeds 90%. Parent comment

Re:Encrypted web traffic now exceeds 90% by chapium on Friday November 01, 2019 @08:31PM (#21425077)
In the CA model is anything 100% yours? A signed cert has to depend on someone you dont know.
[ Parent | on HN ]
Re:Encrypted web traffic now exceeds 90% by JohnFen on Monday November 04, 2019 @12:14PM (#21443790)
> A signed cert has to depend on someone you dont know.

No, it doesn't. If it's signed by my own CA, then I clearly know who signed it. Likewise if it's signed by a CA run by someone else I actually know.

The point of the signing is to have someone I trust validate that the cert they signed is trustworthy even if I don't know the entity that made the cert they signed.

[ Parent | on HN ]
Re:Encrypted web traffic now exceeds 90% by taftster on Friday November 01, 2019 @10:47PM (#21425577)
Unless it's self-signed. Presumably you do know yourself well enough?
[ Parent | on HN ]