Introduction of ssl self-signed Certificate
Among the SSL certificates, there are many categories, including CA's SSL and some domain name types of SSL certificates. What is the difference among these SSL? another kind of certificate is ssl self-signed certificate. What is this ssl self-signed certificate? let's take a look.
In fact, many people do not understand what a self-signed certificate is. However, this kind of certificate cannot be cancelled, and if it is intercepted, it can be communicated again. And the self-signed certificate can not be simply trusted, the browser will also check, need to manually confirm whether to trust the certificate. All websites that use self-signed certificates explicitly tell users that this is the case, and users must trust and continue to browse! This creates an opportunity for man-in-the-middle attacks.
So you can see that ssl self-signed certificate is also a kind of SSL certificate. However, most of these certificates are insecure and have some problems. However, there will be some problems in SSL protocol, because the relevant tracking technology can not be used for leak repair and detection. This kind of BUG is also possible to be intercepted, so there will be problems, not necessarily safe. Another common problem in self-signed certificates is that the validity period of certificates is too long, ranging from 5 years to 20 or 30 years, and they all use insecure 1024-bit encryption algorithms. But this kind of certificate is generally insecure, but it will be limited by certain standards, but the basic principle why to limit the validity of the certificate is: the longer the validity period, the more likely it is to be cracked by a hacker. Because he has enough time (20 years) to crack your encryption.
SSL certificate securely encrypts the website, which can effectively prevent hijacking, prevent your website from being maliciously implanted with advertisements, prevent tampering and monitoring from leaking users' passwords, and optimize the SEO ranking of search engines with SSL certificates.
