Re: outdated ssl cert

[János Löbb <janos.lobb@xxxxxxxx>]

On Jan 16, 2010, at 11:58 AM, Vadkan Jozsef wrote:

> what does a self-signed outdated ssl cert worth? [https]
>
> could it be tricked [https] in a way, that the end user will not
> recognize? [e.g. he already accepted the cert one time, and the  
> browser
> would warn her, if it been ""attacked""?]
>
> ..I mean does an outdated self-signed certificate give the same  
> security
> as a normal cert?
>
> thanks

You can always create a non-outdated self-signed certificate, so what  
is the problemó ?
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx