Public Key Infrastructure

Question 1

What is the first step in getting a certificate from a Certificate Authority?

Answer 1

Generate a public/private key pair

Question 2

What is the second step in getting a certificate from a Certificate Authority?

Answer 2

Generate a certificate signing request (CSR). Providing identity information is necessary.

Question 3

What do Extended Validated Certificates require to be verified?

Answer 3

Legal and proper standings of the organisation; verify the operational existence + everything OV requires

Question 4

What is the difference between EV and OV?

Answer 4

EV requires extensive verification, OV does not

Question 5

How does a root CA become verified?

Answer 5

It self signs itself

Question 6

How does PKI defeat MITM attack? e.g. attacker forwards the authentic certificate from example.com

Answer 6

Attacker does not know corresponding private key, therefore cannot know the secret

Question 7

How does MITM attack public key encryption?

Answer 7

By providing the attackers own public key instead of the servers public key to the victim