News for hackers. Stuff that matters.
Re:Show HN: OneSite – Free, unlimited web hosting with cPane... by nsgi on Sunday October 09, 2016 @12:49PM (#12671989)
Self-signed certificates are not secure as they are vulnerable to man-in-the-middle attacks.

https://security.stackexchange.com/questions/8110/what-are-t...

With free/cheap certificates widely available through e.g. Let's Encrypt and AWS Certificate Manager, there's absolutely no reason to use self-signed certificates.

The cPanel login page linked to in the footer isn't using any HTTPS, self-signed or otherwise. This means that anyone controlling the network can inject javascript to steal your users' passwords.

There are no comments on this comment yet.