Timeline for Why do many companies reject expired SSL certificates as bugs in bug bounties?
Current License: CC BY-SA 4.0
6 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Mar 6, 2023 at 14:49 | comment | added | Christopher Schultz | An SSL/TLS certificate is just the public part of a public/private key-pair plus some additional metadata such as identity, validity dates, and signatures. The whole point of the certificate (and public key) is that is it widely distributed. It's public. If it's not available to the public (even if the definition of "the public" is pretty narrow, such as within an intranet/VPN/VLAN), then it's useless. Keeping your public keys private doesn't allow them to be used. I see that the original question has been edited at this point so my comment looks like ignorant trolling. Originally it wasn't. | |
Mar 6, 2023 at 0:04 | comment | added | nobody | @ChristopherSchultz Source? | |
S Mar 4, 2023 at 10:12 | history | suggested | user71659 | CC BY-SA 4.0 |
More precise about the secret part of a SSL certificate, per Christopher Schultz's comment.
|
Mar 4, 2023 at 3:00 | review | Suggested edits | |||
S Mar 4, 2023 at 10:12 | |||||
Mar 3, 2023 at 21:47 | comment | added | Christopher Schultz | Nearly all SSL certificates are leaked. It's kind of the point ;) | |
Mar 3, 2023 at 7:18 | history | answered | Artem S. Tashkinov | CC BY-SA 4.0 |