So, probably no one's favorite subject.
But I had a couple questions. When a server, controller, etc, allows the upload of a trusted CA, and intermediate CA, and the signed certificate . What do you normally do?
I know you can chain the root and intermediate into the signed certificate, but if they're uploaded all separate isn't that the same? If not how does it differ?
Lastly, cert trust issues I know are pretty much entirely client side, they don't have the ca or intermediate installed etc. How do you explain that to clients/customers in a way they accept it? Cause I seem to always get the generic "that's not acceptable that's too much work"
Maybe there's no explaining it to them...and we'll be forever ranting about that.
No comments:
Post a Comment