823
edits
(→Endpoints: clean up & consolidate more) |
(→Crypto: add some ssl links) |
||
Line 134: | Line 134: | ||
* SSL | * SSL | ||
** | ** example of site that sells SSL certs: https://www.namecheap.com/ssl-certificates.aspx | ||
** | ** example of who an OS trusts (Arch Linux uses Mozilla's cert list): https://www.archlinux.org/packages/core/any/ca-certificates/ | ||
** any of these orgs can impersonate any website | ** any of these orgs can impersonate any website | ||
** cert authorities don't solve mitm, just narrows down who can do it | ** cert authorities don't solve mitm, just narrows down who can do it |