Security Basics mailing list archives

SSL Certificate - Internal CA vs "well known CA"


From: sfmailsbm () gmail com
Date: 6 Aug 2007 12:04:08 -0000

Dear List,
Just wanted to understand why using a "well known 'trusted' CA" (e.g. verisign) is more secure than using an Internal 
CA to manage Certificates

e.g. if a company wants to publish a non-financial site (as opposed to, say, Internet Banking) would not an Internal CA 
be as Secure as an external one?

What is the real (security) benefit of using (expensive) external (e.g. Verisign) Certs?

Thanks you for your comments


Current thread: