News for hackers. Stuff that matters.

A comment on Launching in 2015: A Certificate Authority to Encrypt the Entire Web. Parent comment

Re:Launching in 2015: A Certificate Authority to Encrypt the... by sarciszewski on Tuesday November 18, 2014 @08:16PM (#8627595)
Plaintext is zero security.

Self-signed is a low probability of security.

Signed is a high probability of security.

This continuum makes more sense than the current state of affairs.

[ Parent | on HN ]
Re:Launching in 2015: A Certificate Authority to Encrypt the... by pestaa on Wednesday November 19, 2014 @03:42AM (#8628909)
If someone forwards plaintext, it's called a proxy.

If someone forwards encrypted content on behalf of my server, it's called man-in-the-middle attack, and they should not be capable of doing it without the huge red flags.

[ Parent | on HN ]
Re:Launching in 2015: A Certificate Authority to Encrypt the... by vsl on Wednesday November 19, 2014 @05:32AM (#8629215)
Self-signed is a significant probability of man-in-the-middle attack.
[ Parent | on HN ]