48
Why are CAs important if anyone can get their certificate signed for free? (lemmy.world)
submitted 3 years ago by to c/explainlikeimfive@lemmy.world
10 comments fedilink hide all child comments
 

For example, anyone could use Let's Encrypt to get a trusted certificate, so what makes this trustworthy? Or why not trust everyone that signs their own certificates with a program like OpenSSL?

you are viewing a single comment's thread
view the rest of the comments
[–] 19 points 3 years ago

It's less about the trustworthiness of the site and more about confirming the site's identity. Maybe the original is a scam site, but at least you know it's the original.

  • permalink
  • fedilink
  • source
    •