An internal library kiosk presents a self-signed TLS certificate with no public CA chain. What is the main trust implication compared with a certificate from a trusted third-party CA?
Select an answer to reveal the explanation.
Short Explanation
A self-signed cert is like a handmade visitor badge with no city hall stamp—you can still agree to honor it locally, but browsers will not treat it as publicly vouched. Trust is something you pin yourself, not something the public CA club hands you.
Full Explanation
A self-signed certificate is not validated through a publicly trusted certification authority chain, so clients only trust it if administrators explicitly establish that certificate or its issuing root as trusted. Public CA certificates benefit from inclusion in common trust stores. Self-signed certificates can still negotiate encryption when trusted locally; they do not inherently provide stronger non-repudiation than CA-signed certificates.