Jump to content

Talk:Certificate signing request: Difference between revisions

Page contents not supported in other languages.
From Wikipedia, the free encyclopedia
Content deleted Content added
crypto
No edit summary
Line 9: Line 9:


: I'm not sure what you mean by this. CSRs are "plain text"; their integrity is protected by a signature. They're normally transferred in some encoded form only because they need to be machine readable anyway, since they contain a digital signature. I've tried to update the introduction to clarify. [[User:Namnatulco|Namnatulco]] ([[User talk:Namnatulco|talk]]) 08:42, 16 February 2017 (UTC)
: I'm not sure what you mean by this. CSRs are "plain text"; their integrity is protected by a signature. They're normally transferred in some encoded form only because they need to be machine readable anyway, since they contain a digital signature. I've tried to update the introduction to clarify. [[User:Namnatulco|Namnatulco]] ([[User talk:Namnatulco|talk]]) 08:42, 16 February 2017 (UTC)
: There is no SSL certificate. [[SSL]] is an old and insecure protocol for transport layer security. The most famous format is the [[X.509] certificate.

Revision as of 12:03, 9 October 2020

WikiProject iconComputing: Networking / Software / Security Start‑class Low���importance
WikiProject iconThis article is within the scope of WikiProject Computing, a collaborative effort to improve the coverage of computers, computing, and information technology on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.
StartThis article has been rated as Start-class on Wikipedia's content assessment scale.
LowThis article has been rated as Low-importance on the project's importance scale.
Taskforce icon
This article is supported by Networking task force (assessed as Low-importance).
Taskforce icon
This article is supported by WikiProject Software (assessed as Low-importance).
Taskforce icon
This article is supported by WikiProject Computer Security (assessed as Low-importance).
Things you can help WikiProject Computer Security with:
Article alerts will be generated shortly by AAlertBot. Please allow some days for processing. More information...
  • Answer question about Same-origin_policy
  • Review importance and quality of existing articles
  • Identify categories related to Computer Security
  • Tag related articles
  • Identify articles for creation (see also: Article requests)
  • Identify articles for improvement
  • Create the Project Navigation Box including lists of adopted articles, requested articles, reviewed articles, etc.
  • Find editors who have shown interest in this subject and ask them to take a look here.
WikiProject iconCryptography: Computer science Unassessed
WikiProject iconThis article is within the scope of WikiProject Cryptography, a collaborative effort to improve the coverage of Cryptography on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.
???This article has not yet received a rating on Wikipedia's content assessment scale.
???This article has not yet received a rating on the importance scale.
Taskforce icon
This article is supported by WikiProject Computer science.

The article currently doesn't answer why a CSR is necessary - why don't you just send the information in plain text? Something similar to the following text really needs to be included in the article itself and not just the talk page. — Preceding unsigned comment added by Martinording (talkcontribs) 16:19, 15 February 2017 (UTC)[reply]

A CSR or Certificate Signing request is a block of encrypted text that is generated on the server that the certificate will be used on. It contains information that will be included in your certificate such as your organization name, common name (domain name), locality, and country. It also contains the public key that will be included in your certificate. A private key is usually created at the same time that you create the CSR.

A certificate authority will use a CSR to create your SSL certificate, but it does not need your private key. You need to keep your private key secret. What is a CSR and private key good for if someone else can potentially read your communications? The certificate created with a particular CSR will only work with the private key that was generated with it. So if you lose the private key, the certificate will no longer work.

I'm not sure what you mean by this. CSRs are "plain text"; their integrity is protected by a signature. They're normally transferred in some encoded form only because they need to be machine readable anyway, since they contain a digital signature. I've tried to update the introduction to clarify. Namnatulco (talk) 08:42, 16 February 2017 (UTC)[reply]
There is no SSL certificate. SSL is an old and insecure protocol for transport layer security. The most famous format is the [[X.509] certificate.