Linked Questions

5
votes
3answers
6k views

How does the Certificate Authority work [duplicate]

I'm learning how the Certificate Authority work and have a question. As my understanding, the Certificate Authority can guarantee that the client get the true public-key: Saying that I'm a server and ...
2
votes
2answers
269 views

Can Certificate be validated locally [duplicate]

When I establish TLS/SSL with some server he sends me the certificate in the process. The certificate is signed by a certificate authority. In my PC/browser I have a list of trusted certificate ...
1
vote
1answer
2k views

How does browser verify if SSL certificate is issued by CA? [duplicate]

As I'm studying how HTTPS works, one thing baffled me a lot, that is - How does browser verify if SSL certificate is issued by trusted CA? Do browser verify this by ask CA's server? Or it's just the ...
0
votes
2answers
190 views

What is the rationale of binding SSL certificates to a domain name? [duplicate]

As I understand them, SSL certificates contain a domain name, a public key and the giving CA. Why is it important to include a domain name? Why isn't it enough that the CA considers the public key as ...
0
votes
1answer
330 views

How does a web client check the signing authority of a server certificate? [duplicate]

In HTTP The Definitive Guide When you establish a secure web transaction through HTTPS, modern browsers automatically fetch the digital certificate for the server being connected to. If the ...
0
votes
1answer
164 views

Can a site with HTTPS be impersonated if it's visited for the first time? [duplicate]

From https://doesmysiteneedhttps.com/: "Attackers can still impersonate my site, even if I use HTTPS." They can try, but as long as your private key stays private, browsers will show ...
1
vote
0answers
231 views

Creating a CA, server and client certs - chain not included? Or how to verify issuer? [duplicate]

I've created a CA, server and client certificates: # set up CA openssl req -x509 -config openssl-ca.cnf -newkey rsa:4096 -sha256 -out cacert.pem -outform PEM touch index.txt echo '01' > serial.txt ...
1
vote
0answers
79 views

Self-signed SSL certificates vs CA-signed certificates [duplicate]

While reading about certificates, I came across this article. It says: The point of a CA-signed certificate is to give slightly stronger verification that you are actually using the key that ...
1
vote
1answer
71 views

HTTPS flow clarification [duplicate]

I have done a small test and result is as expected, but I am trying to understand more. I have configured a fake DNS server to resolve all names to the IP of my VPS. On my VPS, I installed a web ...
0
votes
0answers
46 views

Is a trusted device, on a public network, still vulnerable to a man in the middle attack? [duplicate]

For example, if I am using my personal laptop on a public wifi, and type in the website I want to go to that includes HTTPS, (lets assume https://www.google.com/gmail/) can I reasonably trust that I'm ...
0
votes
0answers
38 views

How does authentication and certificate exchange occur when connecting to a website and how is the trust verification performed? [duplicate]

I'm learning PKI infrastructure but i have some questions that my teacher don't respond. Thank you for the possible answers.
0
votes
0answers
32 views

Validate that CA really signed certificate [duplicate]

What is the process of validating that a ssl certificate I try to validate is really signed by CA I trust? What is the part of the certificate (The one I try to validate) is the one cant be faked? ...
0
votes
0answers
25 views

How should an application verify a servers certificate? [duplicate]

Im developing an application and i want this application to connect to my server via ssl (using openssl currently). I want this application to verify my servers certificate. The problem is i dont ...
0
votes
0answers
16 views

How is SSL certificated checked? [duplicate]

When you establish a new SSL connection, during handshake the server sends you his certificate together with public key. Then the browser checks the certificate againts CA. However I do not understand ...
1225
votes
3answers
653k views

How does SSL/TLS work?

How does SSL work? I just realised we don't actually have a definitive answer here, and it's something worth covering. I'd like to see details in terms of: A high level description of the protocol. ...

15 30 50 per page