For example, anyone could use Let's Encrypt to get a trusted certificate, so what makes this trustworthy? Or why not trust everyone that signs their own certificates with a program like OpenSSL?
Why are CAs important if anyone can get their certificate signed for free?
3 years ago by lemmington_steele to c/explainlikeimfive
load all comments
lemmington_steele 1 point 3 years ago
perfect! thank you :)
explainlikeimfive
@lemmy.world
22539
237
494
Simplifying Complexity, One Answer at a Time!
Rules
- Be respectful and inclusive.
- No harassment, hate speech, or trolling.
- Engage in constructive discussions.
- Share relevant content.
- Follow guidelines and moderators' instructions.
- Use appropriate language and tone.
- Report violations.
- Foster a continuous learning environment.
go to feed...
explainlikeimfive
@lemmy.world
22539
237
494
Simplifying Complexity, One Answer at a Time!
Rules
- Be respectful and inclusive.
- No harassment, hate speech, or trolling.
- Engage in constructive discussions.
- Share relevant content.
- Follow guidelines and moderators' instructions.
- Use appropriate language and tone.
- Report violations.
- Foster a continuous learning environment.
go to feed...
the Cert just confirms, that the domain your accessing is belonging to who owns it. When you signup for a cert at LetsEncrypt, you have to run a script on the source, which confirms as your domain.
You wouldn't be able to get a Cert for e.g. amazon.com - because you wouldn't be able to run that specific script on the source and so LetsEncrypt couldn't confirm if that domain really is yours or not. And that's as well the reason, why not trust everyone,
save