Linked Questions

3
votes
3answers
4k views

How does the Certificate Authority work [duplicate]

I'm learning how the Certificate Authority work and have a question. As my understanding, the Certificate Authority can guarantee that the client get the true public-key: Saying that I'm a server and ...
2
votes
2answers
267 views

Can Certificate be validated locally [duplicate]

When I establish TLS/SSL with some server he sends me the certificate in the process. The certificate is signed by a certificate authority. In my PC/browser I have a list of trusted certificate ...
1
vote
1answer
2k views

How does browser verify if SSL certificate is issued by CA? [duplicate]

As I'm studying how HTTPS works, one thing baffled me a lot, that is - How does browser verify if SSL certificate is issued by trusted CA? Do browser verify this by ask CA's server? Or it's just the ...
0
votes
2answers
139 views

What is the rationale of binding SSL certificates to a domain name? [duplicate]

As I understand them, SSL certificates contain a domain name, a public key and the giving CA. Why is it important to include a domain name? Why isn't it enough that the CA considers the public key as ...
0
votes
1answer
159 views

Can a site with HTTPS be impersonated if it's visited for the first time? [duplicate]

From https://doesmysiteneedhttps.com/: "Attackers can still impersonate my site, even if I use HTTPS." They can try, but as long as your private key stays private, browsers will show ...
0
votes
1answer
121 views

How does a web client check the signing authority of a server certificate? [duplicate]

In HTTP The Definitive Guide When you establish a secure web transaction through HTTPS, modern browsers automatically fetch the digital certificate for the server being connected to. If the ...
1
vote
0answers
150 views

Creating a CA, server and client certs - chain not included? Or how to verify issuer? [duplicate]

I've created a CA, server and client certificates: # set up CA openssl req -x509 -config openssl-ca.cnf -newkey rsa:4096 -sha256 -out cacert.pem -outform PEM touch index.txt echo '01' > serial.txt ...
1
vote
0answers
62 views

Self-signed SSL certificates vs CA-signed certificates [duplicate]

While reading about certificates, I came across this article. It says: The point of a CA-signed certificate is to give slightly stronger verification that you are actually using the key that ...
1
vote
1answer
60 views

HTTPS flow clarification [duplicate]

I have done a small test and result is as expected, but I am trying to understand more. I have configured a fake DNS server to resolve all names to the IP of my VPS. On my VPS, I installed a web ...
0
votes
0answers
46 views

Is a trusted device, on a public network, still vulnerable to a man in the middle attack? [duplicate]

For example, if I am using my personal laptop on a public wifi, and type in the website I want to go to that includes HTTPS, (lets assume https://www.google.com/gmail/) can I reasonably trust that I'm ...
0
votes
0answers
35 views

How does authentication and certificate exchange occur when connecting to a website and how is the trust verification performed? [duplicate]

I'm learning PKI infrastructure but i have some questions that my teacher don't respond. Thank you for the possible answers.
0
votes
0answers
29 views

How does a web browser obtain the public key of a certificate author? [duplicate]

As far as I know, when a web browser verifies the signature in a SSL certificate, it uses the public key of the certificate author (CA) which has signed the certificate. Does the web browser contacts ...
1195
votes
3answers
637k views

How does SSL/TLS work?

How does SSL work? I just realised we don't actually have a definitive answer here, and it's something worth covering. I'd like to see details in terms of: A high level description of the protocol. ...
36
votes
3answers
10k views

How does a client know an SSL cert has been signed by a CA if the client doesn't have the CA's public key?

I'm still learning how SSL/TSL works, so apologies if this question is very basic. I understand that the server offers the client its SSL certificate, which contains the signature of a CA. I also ...
49
votes
2answers
8k views

Digital Certificate deployment: using two certs for each user?

At a large enterprise environment I have come across a deployment approach for Digital Certificates where each user is issued two (2) key pairs: One for signing documents, emails, etc. that is ...

15 30 50 per page