Sujet : Re: Chromium and self-signed certificates
De : ldo (at) *nospam* nz.invalid (Lawrence D'Oliveiro)
Groupes : comp.sys.raspberry-piDate : 02. Sep 2024, 04:46:39
Autres entêtes
Organisation : A noiseless patient Spider
Message-ID : <vb3ceu$1r1t9$9@dont-email.me>
References : 1 2 3 4 5 6 7 8
User-Agent : Pan/0.160 (Toresk; )
On Sun, 1 Sep 2024 16:12:50 -0000 (UTC), bp wrote:
In principle it would make sense to make a root CA for the three domains
(zefox.com, zefox.net and zefox.org) under my control but if I disturb
that one CA up all three become unreliable.
If these are names intended to be accessed by the general public, then you
need certs signed by official CAs that are trusted as standard by the
browsers that the general public uses.
Setting up your own private CA only works for authentication between
machines that you control.