Linked Questions

4
votes
1answer
518 views

Why can't a self-made SSL certificate have a fake signature? [duplicate]

Let me explain what I mean. I've read Why is faking SSL certificate difficult, and my question is sort of a step beyond that. If some random person creates a certificate, what's stopping them from ...
0
votes
1answer
525 views

What exactly does ipsec and ssl do? [duplicate]

Im trying to figure out how SSL and ipsec works. I know the process in both SSL and ipsec but why do I need SSL if I can use IPsec when it runs below the transport layer. Wont IPsec encrypt everything ...
3
votes
2answers
104 views

What problem does PKI fix; how would someone “lie about their identity”? [duplicate]

What does having a certificate issued by a Content Authority protect against? In everything I've red (and watched) they teach it as "you are given the public key to communicate with Alice, but how do ...
0
votes
1answer
111 views

How Google has an SSL certificate from itself and my browser doesn't give an error [duplicate]

I know that I can create my own SSL certificate, but in this case the browser will give 'not trusted' error to the user, as the certificate is not browser trustworthy. So companies go and get an SSL ...
1
vote
1answer
71 views

How does PKI help prove a site is legitimate? [duplicate]

Apologies if this sounds like a newbie question! PKI is often stated as being able to prove a site is legitimate, i.e. Amazon.co.uk is the real Amazon.co.uk Can someone help explain how PKI/SSL ...
0
votes
0answers
23 views

How related SSL/TLS to PKI? [duplicate]

It is not clear, how SSL/TLS related to PKI? It seems, PKI is part of SSL/TLS, but I'm not sure. Any clear explanation?
1124
votes
3answers
605k views

How does SSL/TLS work?

How does SSL work? I just realised we don't actually have a definitive answer here, and it's something worth covering. I'd like to see details in terms of: A high level description of the protocol. ...
25
votes
4answers
22k views

Checklist on building an Offline Root & Intermediate Certificate Authority (CA)

Microsoft allows a CA to use Cryptography Next Generation (CNG) and advises of incompatibility issues for clients that do not support this suite. Here is an image of the default cryptography settings ...
34
votes
2answers
49k views

Advantages of client certificates for client authentication?

I'm no security expert, so please just ask in a comment if I haven't made my question clear enough for an answer. The Scenario We have a server running WCF services, and a number of clients ...
24
votes
3answers
2k views

A Different Approach to PKI

After yet another failure of the public key infrastructure, I was thinking about how broken the whole thing is. This business of undeniably associating an identity with a public key, and all the work ...
10
votes
4answers
36k views

SSL Client Certificate authentication

Is it possible to make a program which uses client certificate authentication with only public and private key (I have not generated any certificate, I have only public and private key). Simply, I ...
18
votes
3answers
2k views

Why are CA-issued certificates considered so much more secure than self-signed certificates

I looked at other Stack Exchange posts explaining why self-signed certificates are not as secure as CA-issued certificates, and most of these pages say the same thing: If it's self-signed, and the ...
11
votes
1answer
20k views

What is a Certification Path in SSL certificate?

I've been trying to learn more about Digital certificates for the past few days and I'm struggling in order to understand how actually this concept is applied in the real world. Anyways, as I visited ...
8
votes
6answers
2k views

Easy explanation of SSL client certificates for a developer

I've been thinking about using client certificates for my web apps, desperately hoping for security-conscious users to put their private key on HSMs so they don't get stolen even if the machine is ...
0
votes
2answers
234 views

Understanding SSL certificates [duplicate]

How does an SSL certificate prove the emitter is who he pretends to be ? If Bob (holding a certificate) and Alice wanted to establish a SSL-secured connection, wouldn't John be able to get the ...

15 30 50 per page