[jdev] self signed cert
Andrey Utkin
andrey_utkin at fastmail.com
Wed May 4 05:49:52 UTC 2016
On Wed, May 04, 2016 at 01:21:09AM +0200, Tomasz Sterna wrote:
> W dniu 03.05.2016, wto o godzinie 11∶36 -0700, użytkownik DannyD
> napisał:
> > Now your client XMPP application ONLY trusts & can be decrypted by
> > the server that you've configured it to communicate with, and all the
> > communications are safe from eavesdropping.
>
> What happens when your private key gets lost/compromised?
Nothing worse than in case with 3rd party CA, no?
And in case of self-signed nobody would want your money for new
replacement certs.
More information about the JDev
mailing list