News for hackers. Stuff that matters.

A comment on OpenSSL is written by monkeys (2009). Parent comment

Re:OpenSSL is written by monkeys (2009) by hadoukenio on Tuesday April 08, 2014 @06:58PM (#7556561)
There is nothing wrong with self-signed certificates. If you need to trust a website that uses self-signed certificates, just make sure to verify out-of-band.
[ Parent | on HN ]
Re:OpenSSL is written by monkeys (2009) by ScottWhigham on Tuesday April 08, 2014 @07:17PM (#7556658)
Yes, I trust my own self-signed certs and I might trust the self-signed certs of certain sites. However, telling me that "There is nothing wrong with self-signed certificates." is irresponsible IMO. Who runs "peereboom.us"? #### if I know. I'm going to tell FF "It's okay - I'm good" this time b/c I'm not doing anything that matters but, as a rule, self-signed certs for unknown sites is not okay.
[ Parent | on HN ]
Re:OpenSSL is written by monkeys (2009) by ghshephard on Tuesday April 08, 2014 @07:43PM (#7556782)
Would you trust visiting a site that's just HTTP?

Self signed certs for unknown sites are fine. There is zero problem visiting them.

[ Parent | on HN ]
Re:OpenSSL is written by monkeys (2009) by hadoukenio on Tuesday April 08, 2014 @07:52PM (#7556823)
@ScottWhigham I'm not being irresponsible. I'm with ghshephard on this one.
[ Parent | on HN ]
Re:OpenSSL is written by monkeys (2009) by markwakeford on Tuesday April 08, 2014 @08:08PM (#7556876)
ahmen
[ Parent | on HN ]
Re:OpenSSL is written by monkeys (2009) by lkd on Friday April 11, 2014 @05:59AM (#7572036)
Self-signed certs are OK in every scenario that HTTP would be OK, and then some.
[ Parent | on HN ]
Re:OpenSSL is written by monkeys (2009) by kzrdude on Tuesday April 08, 2014 @10:25PM (#7557359)
There are two problems in Firefox:

* The excepted site displays the exact same padlock icon as hacker news for example

* "Add exception permanently" is selected by default.

[ Parent | on HN ]
Re:OpenSSL is written by monkeys (2009) by hadoukenio on Wednesday April 09, 2014 @06:25AM (#7558544)
What does that have to do with self-signed certificates in general rather than an issue with your particular browser?
[ Parent | on HN ]