

31·
12 days agoI think encrypting with a public key is mostly used in client -> server traffic (client encrypts with server’s public key, server decrypts with private), and not code signing. However, I’m no TLS/asymmetric crypto savant.
I think encrypting with a public key is mostly used in client -> server traffic (client encrypts with server’s public key, server decrypts with private), and not code signing. However, I’m no TLS/asymmetric crypto savant.
Is it Clive?
Seriously. Hearing about recall was the last straw for me. I switched to Linux for gaming, and it’s working great. I don’t use windows in a personal capacity at all anymore
At this rate, my next system might be a mac
I know some people in real life that thought Colbert’s “Republican” character was genuine and not satire. It’s sad
Should be a nottheonion article
I want a suburban home. I want to be a clone
I don’t have much experience in the realm of gpg. My experience is mostly with TLS. From what I know, if you’re doing client authentication, you encrypt your message with your private key, and then the public key on a cert is used for validating that the message actually came from you.
I think code signing is similar to client auth, but not positive. Again, I use TLS, but I’m not a professional
https://about.signpath.io/code-signing/theory#%3A~%3Atext=Software+publishers+use+a+secret%2Cpart+of+the+distribution+package.
Edit:
What I found from Wikipedia:
The client sends a CertificateVerify message, which is a signature over the previous handshake messages using the client’s certificate’s private key. This signature can be verified by using the client’s certificate’s public key. This lets the server know that the client has access to the private key of the certificate and thus owns the certificate.
https://en.m.wikipedia.org/wiki/Transport_Layer_Security#Client-authenticated_TLS_handshake