News for hackers. Stuff that matters.

A comment on OpenSSL is written by monkeys (2009). Parent comment

Re:OpenSSL is written by monkeys (2009) by ScottWhigham on Tuesday April 08, 2014 @07:17PM (#7556658)
Yes, I trust my own self-signed certs and I might trust the self-signed certs of certain sites. However, telling me that "There is nothing wrong with self-signed certificates." is irresponsible IMO. Who runs "peereboom.us"? #### if I know. I'm going to tell FF "It's okay - I'm good" this time b/c I'm not doing anything that matters but, as a rule, self-signed certs for unknown sites is not okay.
[ Parent | on HN ]
Re:OpenSSL is written by monkeys (2009) by ghshephard on Tuesday April 08, 2014 @07:43PM (#7556782)
Would you trust visiting a site that's just HTTP?

Self signed certs for unknown sites are fine. There is zero problem visiting them.

[ Parent | on HN ]
Re:OpenSSL is written by monkeys (2009) by hadoukenio on Tuesday April 08, 2014 @07:52PM (#7556823)
@ScottWhigham I'm not being irresponsible. I'm with ghshephard on this one.
[ Parent | on HN ]
Re:OpenSSL is written by monkeys (2009) by markwakeford on Tuesday April 08, 2014 @08:08PM (#7556876)
ahmen
[ Parent | on HN ]
Re:OpenSSL is written by monkeys (2009) by lkd on Friday April 11, 2014 @05:59AM (#7572036)
Self-signed certs are OK in every scenario that HTTP would be OK, and then some.
[ Parent | on HN ]