Why does HTTPS need an SSL certificate?

F

Filipp422021-08-28 13:24:48

Digital certificates

Filipp42, 2021-08-28 13:24:48

Why fence a vegetable garden in HTTPS with some kind of signatures, digital certificates, and so on. Why is it impossible to generate a Diffie-Hellman key using regular HTTP, and then encrypt everything with this key?

Reply

Answer the question

In order to leave comments, you need to log in

2 answer(s)

S

SagePtr, 2021-08-28
@SagePtr

To make sure that it was the server that generated its share of the key, and not the person in the middle, who can pretend to be the server for the client, and the client for the server, and listen to the traffic between them.

A

Armenian Radio, 2021-08-28
@gbg

The certificate is needed not for encryption, but to make sure that the connection is made with a trusted host.
Thanks to the digital signature chain, the client can verify that the certificate was issued by a trusted third party - a certification authority