Skip to main content
replaced http://www.sslshopper.com/ with https://www.sslshopper.com/
Source Link

When we go to websites that have generated certificates themselves you see this red screen that says do not go there!: example http://www.sslshopper.com/assets/images/chrome-beta-ssl-2.pngexample

However when it is trusted by some companies it's all good. So I have a couple of questions:

  • Are certificates that are generated by these companies somehow better/different?

  • If we take to account that NSA, for example, has every private key of these issuers doesn't it make private certificates actually more secure?

When we go to websites that have generated certificates themselves you see this red screen that says do not go there!: example http://www.sslshopper.com/assets/images/chrome-beta-ssl-2.png

However when it is trusted by some companies it's all good. So I have a couple of questions:

  • Are certificates that are generated by these companies somehow better/different?

  • If we take to account that NSA, for example, has every private key of these issuers doesn't it make private certificates actually more secure?

When we go to websites that have generated certificates themselves you see this red screen that says do not go there!: example

However when it is trusted by some companies it's all good. So I have a couple of questions:

  • Are certificates that are generated by these companies somehow better/different?

  • If we take to account that NSA, for example, has every private key of these issuers doesn't it make private certificates actually more secure?

When we go to websites that have generated certificates themselves you see this red screen that says do not go there!.: examlpeexample http://www.sslshopper.com/assets/images/chrome-beta-ssl-2.png

However when it is trusted by some companies it's all good. So I have a couple of questions.:

  • Are certificates that are generated by these companies somehow better/different?

  • If we take to account that NSA, for example, has every private key of these issuers doesn't it make private certificates actually more secure?

When we go to websites that have generated certificates themselves you see this red screen that says do not go there!. examlpe

However when it is trusted by some companies it's all good. So I have a couple of questions.

  • Are certificates that are generated by these companies somehow better/different?

  • If we take to account that NSA, for example, has every private key of these issuers doesn't it make private certificates actually more secure?

When we go to websites that have generated certificates themselves you see this red screen that says do not go there!: example http://www.sslshopper.com/assets/images/chrome-beta-ssl-2.png

However when it is trusted by some companies it's all good. So I have a couple of questions:

  • Are certificates that are generated by these companies somehow better/different?

  • If we take to account that NSA, for example, has every private key of these issuers doesn't it make private certificates actually more secure?

Tweeted twitter.com/#!/StackSecurity/status/433721820588834816
edited tags
Link
Thomas Pornin
  • 328.6k
  • 60
  • 800
  • 969
Source Link
sed
  • 363
  • 1
  • 2
  • 4
Loading