A certification authority is an organization that makes a mapping between the public keys and public DNS names done by a Certificate Authority (CA). One particular key is only appropriate for a single site. A Certificate Authority provides a particular key for a particular site by using its own private key to cryptographically sign the website’s public key.
This signature is computationally infeasible to duplicate. Clients maintain trust anchor stores containing the public key owned by a Certificate Authority. They use those public keys to cryptographically verify the CA’s signatures.
Comments
Post a Comment