Could anybody explain to me where did my browser get SSL certificates? As I understand, communication between me (a client) and web application (server) going through public-private keypair exchange, and I should have my own public-private key ( + server public key).
I can't understand what is used as my certificate? Does my browser generate it?
Or it is preinstalled? Does it generate a certificate for each connection or for each web site?
If my browser generate certificate, how it possible to do this - https://news.ycombinator.com/item?id=10663843 ?
Kazakhstan to MitM all HTTPS traffic starting Jan 1