Show HN: Self-signed certs as a service

#1

Post by jenandre » Fri, Sep 20, 2013, 6:41 PM UTC

Show HN: Self-signed certs as a service
lolroot.ca

Re: Show HN: Self-signed certs as a service

#2

Post by mephux » Fri, Sep 20, 2013, 8:20 PM UTC

Pretty good idea.

Re: Show HN: Self-signed certs as a service

#3

Post by tlongren » Fri, Sep 20, 2013, 8:29 PM UTC

mephux wrote: post #2

Pretty good idea.

Really, really good idea. Now browser makers (looking @ you Google and Mozilla) need make self-signed certs feasible by removing the scary warnings.

Re: Show HN: Self-signed certs as a service

#4

Post by spellboots » Sat, Sep 21, 2013, 2:54 AM UTC

Just in case anyone doesn't realize that this is a terrible idea, this is a terrible idea.

It's certainly a reasonable position that self signed certs should not have such a scary warning, but if you install the lolroot root certificate as a trusted certificate, you will now be completely vulnerable to MITM attacks.

Anyone can pretend to be, for example, your bank, by generating a lolroot self signed certificate for your banks domain name. You've said you trust them, your browser won't put up any warning.

I'm sure most people realize this but in case you didn't, don't install it.

Re: Show HN: Self-signed certs as a service

#5

Post by GrinningFool » Sat, Sep 21, 2013, 3:45 AM UTC

http://pastebin.com/fQ5ftcri

"Need Support for your self-signed cert? 5k/year - 1 (800) 555 - 5549"

Indeed.