logoalt Hacker News

gonzalohmtoday at 6:55 PM1 replyview on HN

I may speak from ignorance, but why do SSL certificates depend on centralized CA?

If I'm an entity such as a bank, I should be able to sign my own certificate and provide the public keys to my clients which then can use it to both encrypt communications and to make sure you are talking with the entity you want to talk to. Am I missing anything?


Replies

coldpietoday at 6:58 PM

> provide the public keys to my clients

How does this part happen? How does the client know that the entity providing them with that public key is who they claim to be?

show 3 replies