[HCoop-Help] when generating an X509 cert, is it important to keep the generated key.pem file private?

[Adam Chlipala]

Daniel Wilkerson wrote:
> when generating an X509 cert, is it important to keep the generated
> key.pem file private?
>   

That depends.  If someone gets ahold of your key, he can impersonate 
your web site.  This only matters if you're using the "prove you're who 
you say you are" aspect of SSL.  Even if someone else knows your key, 
SSL communication is still encrypted.