Description

Detects self-signed SSL/TLS certificates that have not been signed by a trusted Certificate Authority (CA). Self-signed certificates pose a security risk as they lack third-party validation of the certificate's authenticity, making the connection vulnerable to man-in-the-middle attacks.

Detection Strategy

• Examines the SSL/TLS certificate presented by the web server during connection

• Compares the certificate's issuer and subject fields - if they are identical, the certificate is self-signed

• Reports a vulnerability when the certificate issuer matches the subject, indicating no trusted CA was involved in certificate validation