1 |
BillK: |
2 |
... |
3 |
> And another "wondering" - all the warnings about trusting self signed |
4 |
> certs seem a bit self serving. Yes, they are trying to certify who you |
5 |
> are, but at the expense of probably allowing access to your |
6 |
> communications by "authorised parties" (such as commercial entities |
7 |
> purchasing access for MITM access - e.g. certain router/firewall |
8 |
> companies doing deep inspection of SSL via resigning or owning both end |
9 |
> points). If its only your own communications and not with a third, |
10 |
> commercial party self signed seems a lot more secure. |
11 |
... |
12 |
|
13 |
You can use https://letsencrypt.org/ instead of a self-signed cert: |
14 |
|
15 |
Let's Encrypt is a free, automated, and open certificate authority |
16 |
brought to you by the nonprofit Internet Security Research Group (ISRG). |
17 |
|
18 |
It was pretty simple to get it to work with |
19 |
https://github.com/diafygi/acme-tiny |
20 |
|
21 |
Regards, |
22 |
/Karl Hammar |