ssl - Transport Layer Security without Server Certificate -
is there way secure transport layer without server certificate?
i read rfc 4492 , saying there key exchange algorithm name ecdh_anon this, on many of links found not recommended use prone mitm (man in middle) attack.
i want mention server not public , server , clients in same local subnet. server accepting connection on websocket.
what options if want secure transport layer? don't want manually encrypting payload.
you use solution called tls-srp, if supported server , client(s). more common install self-signed server certificate local system, or set own ca , issue own cert server , install ca's root cert trusted root on clients.
Comments
Post a Comment