Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

Bronze

ssl certificate

hi every body

I have few basics questions about ssl certificate.

Here is my understanding about ssl

ssl serves two purposes:

secure the data in transit by public key encryption.

third party certificates validates the side is real not phising side.

now my question is one can copy the certificate belonging to some side and put it on fake side to gain customer trust and fool him into sending his informations such as social security, etc

so how such certificates provide security against this?

thanks alot!

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ssl certificate

the certificate alone is useless.

You also need the associated private key.

So, if you send encrypted data to sb that has stolen your destination certificate, they won't be able to decrypt the traffic since they don't have the associated private key.

Same if they send you data encrypted with a different private key, you won't be able to decrypt with the certificate.

Gilles.

1 REPLY
Cisco Employee

Re: ssl certificate

the certificate alone is useless.

You also need the associated private key.

So, if you send encrypted data to sb that has stolen your destination certificate, they won't be able to decrypt the traffic since they don't have the associated private key.

Same if they send you data encrypted with a different private key, you won't be able to decrypt with the certificate.

Gilles.

380
Views
0
Helpful
1
Replies