• Skip to main content
  • Skip to primary sidebar

Technipages

Tutorials and fixes for smartphone, gadget, and computer problems

  • Topics
    • Android
    • Gaming
    • Hardware
    • Internet
    • iOS
    • MacOS
    • Office
    • Software
    • Windows
    • Definitions
  • Product Reviews
  • Downloads
  • About Technipages
Why Should You Be Careful Installing Certificates on Your Computer?

Why Should You Be Careful Installing Certificates on Your Computer?

By Mel Hawthorne Leave a Comment

There are two types of security certificates that can be installed on your computer: root and client. A client certificate is perfectly safe to use and install, they are simply used to prove your identity to another device. A root certificate carries a lot more power, however, and you should always be careful if you are asked to install one.

A root certificate is a certificate that your device trusts to sign other certificates, these secondary certificates can have many different uses including trusting a website or trusting software. This chain of trust is where the security risk comes from.

What is a certificate used for?

Security on the internet is built on a web of trust. There are many root certificates installed on your computer, combined these create a large certificate infrastructure allowing for a somewhat competitive market. When you connect to a website over HTTPS, your connection is encrypted through an encryption cipher, however, the webserver also sends your computer an HTTPS certificate. Your computer looks at the certificate and determines if it can be trusted by checking if it was issued by a root certificate that your computer trusts.

If the HTTPS is trusted, then your computer successfully connects to the webserver. If the certificate is not trusted, however, your computer will display an “untrusted certificate” warning. This is designed to prevent you from being tricked into connecting to sites that you didn’t mean to. For instance, only the owner of Technipages can get a certificate signed by a trusted root certificate for the Technipages website. While it’s possible to make your own certificate for the Technipages website, no-one would trust it and so everyone would see a warning message.

Certificates that are used to sign software are used to verify that the software legitimately comes from a trusted company, such as Microsoft. This should give you the confidence to allow the software access it needs. Conversely, the lack of this trusted signing should be a warning sign that software may not be legitimate or trustworthy.

Risks of adding a certificate

A chain of trust from only one of any of the trusted root certificates is required for an HTTPS certificate, software signature, or any other form for root certificate validation to work. This is why adding a root certificate is risky and should not be done lightly. If you trust the wrong person and the root certificate is misused it can be used to trick you into trusting websites, software, and more that you shouldn’t and normally wouldn’t. This could make it significantly easier for hackers to hack your computer.

You should almost never need to install a root certificate for any purpose. If you are asked to install one, you should take the time to understand why it’s needed and what it will be used for. If you’re unsure, it may be a good idea to ask for a second opinion from someone that you trust that’s good with computers. Another place you could go to ask is the security forum on stack exchange.

You Might Also Like

  • Gmail: Be Careful with This Message
    Gmail: Be Careful with This Message
  • How To Remove all Stored Certificates on Android
    How To Remove all Stored Certificates on Android
  • Email Security Benefits to Using Digital Certificates
    Email Security Benefits to Using Digital Certificates
  • Installing TikTok on iMac
    Installing TikTok on iMac
  • Installing and Using Github for Android
    Installing and Using Github for Android
  • Installing and Troubleshooting DataCamp App
    Installing and Troubleshooting DataCamp App
  • Installing TWRP on Xiaomi Mi A3
    Installing TWRP on Xiaomi Mi A3
  • Installing and Initializing The Memorigi App
    Installing and Initializing The Memorigi App
  • Installing Windows 10 on Android x86 Tablet
    Installing Windows 10 on Android x86 Tablet

Filed Under: Internet

Reader Interactions

Did this help? Let us know!

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Primary Sidebar

Recent Posts

  • Windows 11: How to Fix Windows 11 Won’t Connect to a Network
  • What to Do When Firefox Won’t Load a Page
  • Chrome: How to Refresh Various Tabs Simultaneously
  • The Latest Foldable Phones – A Look At The Huawei Mate X2
  • Everything Announced at Google I/O 2022 That You Should Care About
  • How to Build the Best High-Spec PC for Your Budget
  • Google Shows Off Pixel 7 and Pixel Watch Ahead of Fall Launch
  • Windows 11: How to View Saved Passwords

Who’s Behind Technipages?

Baby and Daddy My name is Mitch Bartlett. I've been working in technology for over 20 years in a wide range of tech jobs from Tech Support to Software Testing. I started this site as a technical guide for myself and it has grown into what I hope is a useful reference for all.

You May Also Like

  • Best Mid-Market Computer Speakers 2021
  • Best Budget Computer Speakers 2022
  • Best High-End Computer Speakers 2022
  • Best Wireless Computer Speakers 2022
  • Best Wired Computer Speakers 2022

© Copyright 2022 Technipages · All Rights Reserved · Privacy