Once upon a time, Richard Hughes <hughsient(a)gmail.com> said:
On Mon, 28 Aug 2023 at 16:27, Leon Fauster via devel
<devel(a)lists.fedoraproject.org> wrote:
> whats the benefit of this "self-signed TLS certificate" (as it does
> not provide any "security")? Is this stub for something later ... ?
It's a good question. It provides encryption (so client A can provide
the file to client B without client C being aware what's being sent)
Without identification though, it doesn't do that, because there's no
way for client B to know it is really talking to client A - it could be
talking to client C with a man-in-the-middle attack and a different
self-signed cert pretending to be client A.
--
Chris Adams <linux(a)cmadams.net>