News for hackers. Stuff that matters.

A comment on Launching in 2015: A Certificate Authority to Encrypt the Entire Web. Parent comment

Re:Launching in 2015: A Certificate Authority to Encrypt the... by Joeri on Tuesday November 18, 2014 @01:18PM (#8625320)
But when you browse over http, you don't know who you're talking to either, so how are self-signed certificates worse than http?

I'm really having trouble figuring out the attack scenario unique to self-signed certificates that you don't have with plain http.

[ Parent | on HN ]
Re:Launching in 2015: A Certificate Authority to Encrypt the... by hawleyal on Tuesday November 18, 2014 @01:45PM (#8625497)
Security-wise, if they are both vulnerable to trivial exploits, how can you say one is "more secure" than another?
[ Parent | on HN ]