cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

395
Views
0
Helpful
1
Replies
Highlighted
Contributor

ssl certificate

hi every body

I have few basics questions about ssl certificate.

Here is my understanding about ssl

ssl serves two purposes:

secure the data in transit by public key encryption.

third party certificates validates the side is real not phising side.

now my question is one can copy the certificate belonging to some side and put it on fake side to gain customer trust and fool him into sending his informations such as social security, etc

so how such certificates provide security against this?

thanks alot!

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ssl certificate

the certificate alone is useless.

You also need the associated private key.

So, if you send encrypted data to sb that has stolen your destination certificate, they won't be able to decrypt the traffic since they don't have the associated private key.

Same if they send you data encrypted with a different private key, you won't be able to decrypt with the certificate.

Gilles.

1 REPLY 1
Cisco Employee

Re: ssl certificate

the certificate alone is useless.

You also need the associated private key.

So, if you send encrypted data to sb that has stolen your destination certificate, they won't be able to decrypt the traffic since they don't have the associated private key.

Same if they send you data encrypted with a different private key, you won't be able to decrypt with the certificate.

Gilles.

CreatePlease to create content
Content for Community-Ad
August's Community Spotlight Awards