Tagged Questions
3
votes
1answer
67 views
Design of system based on HTTPS, Client Certificates and custom CA
I have the following system:
2 application servers. At the beginning is installed the first server and later is installed the second one.
A client access from a browser to both servers
Application ...
1
vote
1answer
68 views
How to have Thunderbird include a root certificate?
An eMail signed via S/MIME also contains the X.509 certificate chain containing the public key in order to directly verify the signature (assuming its issuing CA is deemed trustworthy). The chain does ...
120
votes
7answers
7k views
How do certification authorities store their private root keys?
Knowledge of a CA private key would allow MitM attackers to transparently supplant any certificates signed by that private key. It would also allow cyber criminals to start forging their own trusted ...
