News for hackers. Stuff that matters.

A comment on Ask HN: How bad is it to use a self-signed SSL certificate?. Parent comment

Re:Ask HN: How bad is it to use a self-signed SSL certificate? by cowbell on Saturday May 31, 2014 @12:22PM (#7826383)
Terrible compared to what? http? I don't understand why we get big scary warnings from browsers for self signed https, but never a peep out of them when submitting the same form over http.
[ Parent | on HN ]
Re:Ask HN: How bad is it to use a self-signed SSL certificate? by nav1 on Saturday May 31, 2014 @12:44PM (#7826460)
Because encountering a site with a self-signed certificate likely means that the connection is MITM'd. In any case, with a self-signed cert you can't who you're connecting to.
[ Parent | on HN ]
Re:Ask HN: How bad is it to use a self-signed SSL certificate? by itistoday2 on Saturday May 31, 2014 @12:56PM (#7826489)
CA-signed certificates do not mean that you are not being MITM'd. They are actually worse in that they give everyone (including the browser) a false sense of security that you have to pay for.

See detailed reply here: https://news.ycombinator.com/item?id=7826443

[ Parent | on HN ]