Self Signed Certs

faq
flatforty
contribute
subscribe
configure
search
rdf

main
parent

Self Signed Certs
by Brandon on Tuesday 22/Nov/2005, @12:56

I would like a better handling of self signed certificates. It is so annoying that when using a perfectly valid and effective self signed certificate to secure internal pages (MRTG / webmail, etc) that we have to deal with the inherent warnings on most browsers.

I'd like to see a color code and location/status bar indicator, that the sie in encrypted, just not verified or something to that effect. I have had clients insist on wasting money on a certficate for internal only use!

Related Links

·   Articles on Konqueror
·   Also by Brandon
·   Contact author

The Fine Print: The following comments are owned by whomever posted them.
( Reply )

Re: Self Signed Certs
by Paul on Tuesday 22/Nov/2005, @16:38

This may make your life a little easier, but it will also be of tremendous benefit to phishing scammers if all those annoying warnings went away, if they could be casually dismissed permanently for all sites. As it is (at least in Mozilla & Firefox), you can permanently accept the certificate for that one site.

[ Reply To This | View ]

Re: Self Signed Certs
by Ben Hutchings on Tuesday 22/Nov/2005, @16:56

You should find some way of installing those certificates in the browsers that need to use them, or for more flexibility run an internal CA (it's not that hard) and install its certificate, or just not bother with SSL. As it is, you're just getting a false sense of security, because your browser can't tell the difference between the certificate you created and another one presented by an attacker who spoofed the DNS response for the web server you're trying to use.

[ Reply To This | View ]

Re: Self Signed Certs
by Eddy on Sunday 08/Jan/2006, @12:46

Today you have much better and free alternative, which will be supported by most web browsers: http://cert.startcom.org
This will make the problem of self-signed certificates disapear, but as well expensive validated / verified certificates too...

[ Reply To This | View ]

The Fine Print: The previous comments are owned by whomever posted them.
( Reply )


		"You would know that after informal research, KDE developers prefer tea!" -- Roberto Alsina
KDE®, "K Desktop Environment", "KDE Dot News", "got the dot?" and the KDE Logo® are trademarks or registered trademarks of KDE e.V. in the European Union, the United States and other countries. All other trademarks and copyrights on this page are owned by their respective owners. Comments are owned by the poster. The rest: Copyright © 2000-2008 KDE e.V. for The KDE Project. For further information or comments on this site, please contact the Webmaster.