News for hackers. Stuff that matters.
Re:HTTPS is more secure, so why isn't the Web using it? by burgerbrain on Monday March 21, 2011 @01:19AM (#2348583)
MITMing someone with selfsigned certs on an open wifi network is trivial. Any scriptkiddy can do it with mere minutes of setup and technical rampup: (http://www.thoughtcrime.org/software/sslsniff/).

In the real world, self-signed certs provide neither identity verification nor security.

There are no comments on this comment yet.