Are valid digital certificates required for clients (Java, C ++, etc.) for a successful https connection?

Question

I plan to implement a small standalone program that will make an https request to the server. Does the client require a valid ssl certificate? How does SSL handshake work in this case? Are there any security issues on the client that do not have an SSL certificate?

Answer 1

In addition to encrypting network traffic, HTTPS is commonly used to authenticate a server. That is, to provide customers with information about who owns the server, etc. To do this, the client must check the trust chain in the certificate published by the server. For this to happen automatically, the client machine must have an installed certificate that describes the certification authority that issued the server certificate. Typically, these certificates are located on your computer in a store called Trusted Root Certification Authorities, and most OSs come with a set of common CAs already installed.

, - , , . - , , . " " HTTPS, .

, - , , , . , ( ), .

Answer 2

HTTPS , , moserware

http://www.moserware.com/2009/06/first-few-milliseconds-of-https.html

Answer 3

, . , , . -, .

. ( , .) , ( ).

Answer 4

HTTPS, , , .