外部网站的自签名证书

Question

TLS handshake for some websites is really slow. (Let it be www.example.com) (I don't own the website)

I was thinking if I could self sign certificate for www.example.com, this could speed up the process (something similar to --no-check-certificate in wget)

PS: I'm aware of the potential security risks associated.

Answer 1

You cannot directly provide your own certificate for the TLS handshake with a website you don't control.

But you might have some SSL intercepting proxy where the connection between this MITM proxy and the client is authenticated by your custom certificate. Only, the connection between the proxy and the server is still authenticated by the servers original certificate, so you've likely just moved the slow handshake problem from your client to your proxy but will be ultimately affected by it the same way.