Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

New answers tagged

0 votes

Goal of CA is to allow clients ability to determine if TLS was tampered with while "in-transit"?

The purpose of TLS is to determine if the message was tampered with or read in transit to the server. The purpose of CAs is to authenticate the server that you are communicating to. The "...
Cort Ammon's user avatar
  • 9,238
2 votes

Goal of CA is to allow clients ability to determine if TLS was tampered with while "in-transit"?

Oof, this got REALLY long. TL;DR: read the below stuff until you reach the horizontal line. The rest breaks down each of your confusions or misconceptions in sequence, and goes into far more detail. ...
CBHacking's user avatar
  • 48.9k
2 votes

Goal of CA is to allow clients ability to determine if TLS was tampered with while "in-transit"?

It seems a lot of the confusion comes from a misunderstanding of how complex networks (like the Internet) work. You somehow assume that the client can simply establish a point-to-point connection to “...
Ja1024's user avatar
  • 7,447
0 votes

Is it a good idea to reuse certificate issued by public CA for internal database client authentication?

On top of what Angel has mentioned above; Some additional drawbacks to consider; Single Point Of Failure : if certificate is compromised both API and database will be at risk Certificate Revocation ...
choppe's user avatar
  • 115
1 vote

Has anyone heard of cases where SSL Certificate insurance/warranty paid out?

I realise this is a six year old question. But I think it's worth having some up-to-date information. Today I did a deep dive into the topic of SSL liability protection (L.P.), after someone tried to ...
inspirednz's user avatar

Top 50 recent answers are included