ssl - Transport Layer Security without Server Certificate -


is there way secure transport layer without server certificate?

i read rfc 4492 , saying there key exchange algorithm name ecdh_anon this, on many of links found not recommended use prone mitm (man in middle) attack.

i want mention server not public , server , clients in same local subnet. server accepting connection on websocket.

what options if want secure transport layer? don't want manually encrypting payload.

you use solution called tls-srp, if supported server , client(s). more common install self-signed server certificate local system, or set own ca , issue own cert server , install ca's root cert trusted root on clients.


Comments

Popular posts from this blog

html - Firefox flex bug applied to buttons? -

html - Missing border-right in select on Firefox -

python - build a suggestions list using fuzzywuzzy -