48
Why are CAs important if anyone can get their certificate signed for free? (lemmy.world)
submitted 3 years ago by to c/explainlikeimfive@lemmy.world
10 comments fedilink hide all child comments
 

For example, anyone could use Let's Encrypt to get a trusted certificate, so what makes this trustworthy? Or why not trust everyone that signs their own certificates with a program like OpenSSL?

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 3 years ago

You still have to provide some proof that you are who you say you are by publishing a specific webpage on the site that will get the certificate or by publishing a specific DNS record on the domain. Self-signed certs don't have that requirement so people could make certs for google.com if they wanted to.

  • permalink
  • fedilink
  • source
    •