Hot answers tagged

2

Self-signed certificates can't be trusted because anyone is able to craft one. An attacker performing a MITM attack could easily replace any certificate by a self-signed one and impersonate any website you're browsing, even if you're using HTTPS. That's why we are using trusted Certificate Authorities to ensure that certificates cannot be falsified.


1

We all need a little context. There is a difference between "untrusted" and secure. And "Trusted" does not necessarily imply Secure (or Authentic) A self-signed certificate on an isolated network with only one server and one client is probably more secure than any "trusted" certificate. And "trusted" implies ONLY that a Certificate Authority Certificate ...



Only top voted, non community-wiki answers of a minimum length are eligible