News for hackers. Stuff that matters.
Re:Why HTTP without encryption and self-signed sertificates ... by smoppi on Wednesday September 14, 2022 @09:34AM (#32836962)
When I'm talking about "lookalike domains", I mean domain names that look exactly the same. It is simply not possible with 7-bit ASCII.

A self-signed certificate can also be used to make sure that the connection is private. Sometimes the private key may have leaked and then the certificate can be "trusted" without being private - though it's easier to just register a lookalike domain and a certificate for it than have a leaked private key.

There are no comments on this comment yet.