Re:HTTPS is more secure, so why isn't the Web using it?
by burgerbrain on Monday March 21, 2011 @01:19AM
(#2348583)
MITMing someone with selfsigned certs on an open wifi network is trivial. Any scriptkiddy can do it with mere minutes of setup and technical rampup: (http://www.thoughtcrime.org/software/sslsniff/).
In the real world, self-signed certs provide neither identity verification nor security.
In the real world, self-signed certs provide neither identity verification nor security.