Is it possible to transfer the “Private key” for an SSL certificate to a freelancer?

V

Vasily Burmistrov2019-01-09 15:49:50

Digital certificates

Vasily Burmistrov, 2019-01-09 15:49:50

Good afternoon!
Prompt: Can I transfer the "Private key" for an SSL certificate to a freelancer who makes an online store? It is safe, he will be able to do something negative later, if so, how will he protect himself?

Reply

Answer the question

In order to leave comments, you need to log in

4 answer(s)

S

SagePtr, 2019-01-09
@SagePtr

If he can intercept traffic to your server, he will be able to wedge in and arrange a man-in-the-middle attack with wiretapping and traffic spoofing. Or sell / give the key to someone who can arrange it.

K

ky0, 2019-01-09
@ky0

It is not required for development. Let them issue a self-signed certificate if HTTPS is critical.

C

CityCat4, 2019-01-09
@CityCat4

No need. Having stolen a private key, it can be represented by your server. Intercept traffic, if possible. A self-made certificate or LE is sufficient for testing.

V

Vasily Burmistrov, 2019-01-09
@SPOQ

To set up a web server
How can I protect myself?