ssl - Transport Layer Security without Server Certificate -


is there way secure transport layer without server certificate?

i read rfc 4492 , saying there key exchange algorithm name ecdh_anon this, on many of links found not recommended use prone mitm (man in middle) attack.

i want mention server not public , server , clients in same local subnet. server accepting connection on websocket.

what options if want secure transport layer? don't want manually encrypting payload.

you use solution called tls-srp, if supported server , client(s). more common install self-signed server certificate local system, or set own ca , issue own cert server , install ca's root cert trusted root on clients.


Comments

Popular posts from this blog

mysql - FireDac error 314 - but DLLs are in program directory -

c++ - Getting C2512 "no default constructor" for `ClassA` error on the first parentheses of constructor for `ClassB`? -

python - build a suggestions list using fuzzywuzzy -