Slyck.com
 
Slyck Chatbox - And More

self created/signed certificates?

This is the forum to discuss tech-software related issues.
Forum rules
PLEASE READ BEFORE POSTING: Slyck Forum Rules

self created/signed certificates?

Postby ejonesss » Tue Dec 10, 2013 4:39 pm

i was wondering can you be able to write your own certificates and tell the site "here use my certificate i dont trust yours"


seeing the article about google's certificates being rogue gave me this idea that if there was a way to write your own certificate then only you know your own certificate and rogue parties could not use the certificate.
…-..-..-..-..-.-----.-…-..-…-..-…-...
ejonesss
 
Posts: 2973
Joined: Thu Feb 06, 2003 5:43 pm

Re: self created/signed certificates?

Postby MrFredPFL » Tue Dec 10, 2013 5:25 pm

that's a good question. hopefully someone more knowledgeable than i can answer it.

my guess would be that yes, it's possible - but i have no idea what exactly it would take to do so.
MrFredPFL
 
Posts: 15771
Joined: Wed Aug 17, 2005 4:48 pm

Re: self created/signed certificates?

Postby sunnyd » Tue Dec 10, 2013 7:22 pm

This may be of interest, it's from March of 2012, but I believe it would still work the same way...

Creating Your Own SSL Certificate Authority (and Dumping Self Signed Certs)

http://datacenteroverlords.com/2012/03/ ... authority/
Follow Slyck on Twitter @SlyckDotCom
Join Slyck's Facebook Fan Page
sunnyd
 
Posts: 30027
Joined: Mon Jan 21, 2008 2:34 pm

Re: self created/signed certificates?

Postby IneptVagrant » Wed Dec 11, 2013 1:51 pm

when you connect to a https, you send a cert already as your identity. Google doesn't care who you are, so they never complain about it.

The purpose of a certificate is to provide authentication. You are talking to Google, and not to someone else.

If you don't trust the certificate, then you don't trust who you are talking.

If you are willing to carry on the conversation anyways, then secrecy doesn't matter.

--

A rouge cert is like a disguise. Someone wants to shake your hand, so they introduce themselves as Google, and then you ask google a bunch of questions, and you check your notebook of facts, and the guy has all the right answers, so you shake his hand.
IneptVagrant
 
Posts: 1247
Joined: Tue Nov 15, 2005 5:07 am
Location: close the world . . . . . . . . . . . . . . txEn eht nepO


Return to Tech/Software Discussion

Who is online

Users browsing this forum: No registered users and 2 guests

© 2001-2008 Slyck.com