Show HN: Self-signed certs as a service(lolroot.ca)
lolroot.ca
Show HN: Self-signed certs as a service
http://lolroot.ca/
3 comments
http://pastebin.com/fQ5ftcri
"Need Support for your self-signed cert? 5k/year - 1 (800) 555 - 5549"
Indeed.
"Need Support for your self-signed cert? 5k/year - 1 (800) 555 - 5549"
Indeed.
It's certainly a reasonable position that self signed certs should not have such a scary warning, but if you install the lolroot root certificate as a trusted certificate, you will now be completely vulnerable to MITM attacks.
Anyone can pretend to be, for example, your bank, by generating a lolroot self signed certificate for your banks domain name. You've said you trust them, your browser won't put up any warning.
I'm sure most people realize this but in case you didn't, don't install it.