mirror of
https://github.com/FiloSottile/mkcert.git
synced 2026-04-25 05:26:03 +03:00
[GH-ISSUE #429] is it safe to install a certificate generated by mkcert from other people? #283
Labels
No labels
TLS stack issue
Windows
bug
duplicate
duplicate
enhancement
help wanted
help wanted
pull-request
question
question
root store
waiting for info
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/mkcert#283
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @dfang on GitHub (Feb 24, 2022).
Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/429
what if i install a certificate generated by mkcert to my mac from xyz.com and trusted it? is it safe? can he (the man who generated the certificate) decrypt what i searched on https://www.google.com or what i bought on https://amazon.com?
@FiloSottile commented on GitHub (Feb 24, 2022):
It is not safe to install a root generated by mkcert (this process). That will indeed allow them to intercept connections to any site.
Installing a specific site certificate (that generated by
mkcert example.comfor example) will only allow intercepting connections to that specific site.@dfang commented on GitHub (Feb 25, 2022):
very clear, thanks !