I'm confused about all the complexity of certificate authorities, self-signed vs third-party signed certificates, etc. Why can't there be a solution as simple as ssh?
I was hoping I could authenticate an https connection like this:
- Create a key pair.
- Install the public key on the web server
- Install the private key on the client browser(s).
Why is it not as simple as this?
All I want is to secure my own private https website. I'd be the only user