From the course: SSL Certificates for Web Developers

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Self-signed certificates

Self-signed certificates

- [Instructor] In this movie, we'll discuss another type of SSL certificate, which are called self-signed certificates. These are less common, but still worth knowing about. Self-signed certificates are SSL certificates that have not been approved by a certificate authority. Instead, they've been certified by you, you or the entity, vouching for the ownership of the public key. That public key can still be used to encrypt data for the handshake that's used to establish secure communication. However, they do not offer any third-party trust. No trusted entity has certified the ownership of the public key. Unless it's been specially configured, a web browser will not trust a self-signed certificate and will warn the user that the website is not secure. So why would you ever use a self-signed certificate if it lacks that trust, and the browsers are going to complain? Self-signed certificates are useful when two systems already trust each other. Let's imagine that I work at a company that…

Contents