There are quite some knowledgeable crypto people on this board and the subject came up a couple of times in the past: Are there alternative trust models for https/TLS, with no CA?
I'm looking into some 'just me and my family' kind of services. For various reasons the 'get a certificate' is not an option, so it's either self-signed or .. whatever else I could look into.
"Not supported in the wild" might not be a big constraint, since I have reasonably good control over all clients here. What, other than running with a self-signed cert and looking into ways to pin that cert on the client maybe, are my options?
I'm looking into some 'just me and my family' kind of services. For various reasons the 'get a certificate' is not an option, so it's either self-signed or .. whatever else I could look into.
"Not supported in the wild" might not be a big constraint, since I have reasonably good control over all clients here. What, other than running with a self-signed cert and looking into ways to pin that cert on the client maybe, are my options?