Why would your browser trust my root CA?
Anyone can create a root certificate authority. This short pilot explores why creating one and getting a client to trust it are different things.
First cut · about 90 seconds · My narration, diagrams, and a replay of real OpenSSL output. Captions and a checked transcript will accompany the finished episode.
The idea to take away
A self-signature doesn’t establish trust. The client’s configured trust anchor does.