what does a self-signed outdated ssl cert worth? [https]

could it be tricked [https] in a way, that the end user will not
recognize? [e.g. he already accepted the cert one time, and the browser
would warn her, if it been ""attacked""?]

...I mean does an outdated self-signed certificate give the same security
as a normal cert?

thanks


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe [at] httpd.apache.org
" from the digest: users-digest-unsubscribe [at] httpd.apache.org
For additional commands, e-mail: users-help [at] httpd.apache.org

On 16-Jan-2010, at 09:58, Vadkan Jozsef wrote:
> does an outdated self-signed certificate give the same security
> as a normal cert?


An outdated cert, self-signed or not, is invalid. So, no.

--
'An appointment is an engagement to see someone, while a morningstar is =
a large lump of metal used for viciously crushing skulls. It is =
important not to confuse the two.' --Men at Arms


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe [at] httpd.apache.org
" from the digest: users-digest-unsubscribe [at] httpd.apache.org
For additional commands, e-mail: users-help [at] httpd.apache.org

On Jan 16, 2010, at 11:58 AM, Vadkan Jozsef wrote:

> what does a self-signed outdated ssl cert worth? [https]
>
> could it be tricked [https] in a way, that the end user will not
> recognize? [e.g. he already accepted the cert one time, and the
> browser
> would warn her, if it been ""attacked""?]
>
> ..I mean does an outdated self-signed certificate give the same
> security
> as a normal cert?
>
> thanks
>
>

You can always create a non-outdated self-signed certificate, so what =

is the problem=F3 ?=

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe [at] httpd.apache.org
" from the digest: users-digest-unsubscribe [at] httpd.apache.org
For additional commands, e-mail: users-help [at] httpd.apache.org