HC3: Installing third party CA cert is a security risk

[juhoroine 0]

Hello,

 

I'd like to use my own CA certificate with HC3. How can I replace the default Fibaro CA cert?

 

Installing a third party CA cert as trusted certificate authority, as suggested by HC3, imposes a security risk:

By installing a CA cert as a trusted CA, you ultimately trust any certificate signed with that CA (here, the Fibaro CA).

Now, if someone somehow gets access to that CA cert signing key, they can sign, for example, a fake certificate to a bank website.

If the attacker can also manipulate your dns traffic, he could redirect your browser to his phony bank site, with now a seemingly valid certificate.

This can happen, for example, if a device in your home netowk (such as Fibaro box) gets hacked and the attacker gets his own dhcp and dns-servers running in your home network.

 

The certificates are there to protect you from the latter. Don't bypass that security.

[Fyase 6]

Back on this old discussion.

 

Is there a way to install a third party certificate in HC3 and replacing the fibaro one?

 

Best regards

Raffaele