Solved

Self-Signed Certificates not trusted

Posted on 2007-11-21
2
1,991 Views
Last Modified: 2008-02-01
Whay are self-signed certificates not trusted??
0
Comment
Question by:wzimmerl
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 7

Accepted Solution

by:
multithreading earned 25 total points
ID: 20330965
because you usually have no practical way of knowing for sure that they are really from who you think they are from. Anyone can make one, and anyone can replace one that someone else made. By the time it gets to you, you can't be sure it is the original, unless you saw the original person make it, and then they burned a CD on an uncompromised system and handed it to you, and you took it to the other system and installed it.

0
 
LVL 2

Assisted Solution

by:SwassLikeMe
SwassLikeMe earned 25 total points
ID: 20331170
What multithreading says is correct.  I would probably add that the reason it's not trusted is because it doesn't come from an authorized certificate server, such as Verisign, etc.  This is why they charge so much, because not everyone can do it (and for good reason).  There is a solution, however.

If you want to simply have a few clients accessing your one website, for example, you can install the certificate on Windows (or in their browser) to allow them to connect via SSL without being warned about an untrusted SSL certificate.

If you're really savy, you could even set up your own local certificate server to use in your domain, that would allow local computers in the domain to automatically trust the system you are connecting to.  That's a lot of work though, so I don't recommend going that route.
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of you may be aware of the recent Google Docs scam emails that have been floating around coming from various people that you know. Here's a guide on identifying How To Identify the Scam Email You will see an email from someone you’ve had co…
Recovering from what the press called "the largest-ever cyber-attack", IT departments worldwide are discussing ways to defend against this in the future. In this process, many people are looking for immediate actions while, instead, they need to tho…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question