Linked Questions

4
votes
1answer
592 views

Why can't a self-made SSL certificate have a fake signature? [duplicate]

Let me explain what I mean. I've read Why is faking SSL certificate difficult, and my question is sort of a step beyond that. If some random person creates a certificate, what's stopping them from ...
0
votes
1answer
571 views

What exactly does ipsec and ssl do? [duplicate]

Im trying to figure out how SSL and ipsec works. I know the process in both SSL and ipsec but why do I need SSL if I can use IPsec when it runs below the transport layer. Wont IPsec encrypt everything ...
3
votes
2answers
109 views

What problem does PKI fix; how would someone “lie about their identity”? [duplicate]

What does having a certificate issued by a Content Authority protect against? In everything I've red (and watched) they teach it as "you are given the public key to communicate with Alice, but how do ...
0
votes
1answer
111 views

How Google has an SSL certificate from itself and my browser doesn't give an error [duplicate]

I know that I can create my own SSL certificate, but in this case the browser will give 'not trusted' error to the user, as the certificate is not browser trustworthy. So companies go and get an SSL ...
1
vote
1answer
71 views

How does PKI help prove a site is legitimate? [duplicate]

Apologies if this sounds like a newbie question! PKI is often stated as being able to prove a site is legitimate, i.e. Amazon.co.uk is the real Amazon.co.uk Can someone help explain how PKI/SSL ...
-1
votes
2answers
57 views

technical difference between TLS and a certificate [duplicate]

I don't quite understand what the difference is between TLS and a certificate. TLS secures the transmission by encrypting the data. So normally no man in the middle attack is possible and nobody else ...
0
votes
0answers
40 views

Just came to know about Digital Certificates. But did't understand the way clients can verify CA [duplicate]

So I just came to know about Digital certificates, and this is what I understand. Public Key, Message + PK_encrypt(Hash(message))/Message Signing, And other identifiers is what a digital signature is....
0
votes
0answers
26 views

How related SSL/TLS to PKI? [duplicate]

It is not clear, how SSL/TLS related to PKI? It seems, PKI is part of SSL/TLS, but I'm not sure. Any clear explanation?
1163
votes
3answers
623k views

How does SSL/TLS work?

How does SSL work? I just realised we don't actually have a definitive answer here, and it's something worth covering. I'd like to see details in terms of: A high level description of the protocol. ...
25
votes
4answers
22k views

Checklist on building an Offline Root & Intermediate Certificate Authority (CA)

Microsoft allows a CA to use Cryptography Next Generation (CNG) and advises of incompatibility issues for clients that do not support this suite. Here is an image of the default cryptography settings ...
34
votes
2answers
50k views

Advantages of client certificates for client authentication?

I'm no security expert, so please just ask in a comment if I haven't made my question clear enough for an answer. The Scenario We have a server running WCF services, and a number of clients ...
24
votes
3answers
2k views

A Different Approach to PKI

After yet another failure of the public key infrastructure, I was thinking about how broken the whole thing is. This business of undeniably associating an identity with a public key, and all the work ...
10
votes
4answers
37k views

SSL Client Certificate authentication

Is it possible to make a program which uses client certificate authentication with only public and private key (I have not generated any certificate, I have only public and private key). Simply, I ...
18
votes
3answers
2k views

Why are CA-issued certificates considered so much more secure than self-signed certificates

I looked at other Stack Exchange posts explaining why self-signed certificates are not as secure as CA-issued certificates, and most of these pages say the same thing: If it's self-signed, and the ...
11
votes
1answer
22k views

What is a Certification Path in SSL certificate?

I've been trying to learn more about Digital certificates for the past few days and I'm struggling in order to understand how actually this concept is applied in the real world. Anyways, as I visited ...

15 30 50 per page