[jdev] self signed cert

Andrey Utkin andrey_utkin at fastmail.com
Wed May 4 05:49:52 UTC 2016


On Wed, May 04, 2016 at 01:21:09AM +0200, Tomasz Sterna wrote:
> W dniu 03.05.2016, wto o godzinie 11∶36 -0700, użytkownik DannyD
> napisał:
> > Now your client XMPP application ONLY trusts & can be decrypted by
> > the server that you've configured it to communicate with, and all the
> > communications are safe from eavesdropping.
> 
> What happens when your private key gets lost/compromised?

Nothing worse than in case with 3rd party CA, no?

And in case of self-signed nobody would want your money for new
replacement certs.


More information about the JDev mailing list