News for hackers. Stuff that matters.

A comment on iOS 18 breaks IMAPS self-signed certs. Parent comment

Re:iOS 18 breaks IMAPS self-signed certs by anamexis on Wednesday September 18, 2024 @05:19PM (#41585678)
It's not that you're trusting your own certificate, it's that you're trusting any self-signed certificate, leaving you open to getting MITM'ed.
[ Parent | on HN ]
Re:iOS 18 breaks IMAPS self-signed certs by darknavi on Wednesday September 18, 2024 @05:23PM (#41585721)
Can't you install trusted certificates by hand on iOS?
[ Parent | on HN ]
Re:iOS 18 breaks IMAPS self-signed certs by anamexis on Wednesday September 18, 2024 @05:44PM (#41585901)
Yes, and you still can. That's not broken.
[ Parent | on HN ]
Re:iOS 18 breaks IMAPS self-signed certs by digitalPhonix on Thursday September 19, 2024 @05:23AM (#41590029)
Based on the bug report I think it is. Mail is not respecting the self signed certificate that’s been added to the user trust store.
[ Parent | on HN ]
Re:iOS 18 breaks IMAPS self-signed certs by denkmoon on Thursday September 19, 2024 @12:02AM (#41588369)
Why would this oblige the client to trust any self-signed cert as opposed to trusting all certificates whose chain of trust can be established using the system's trust store? The reporter isn't asking for mail to automatically trust untrusted certificates, they have added them to the trust store.
[ Parent | on HN ]
Re:iOS 18 breaks IMAPS self-signed certs by bdavbdav on Thursday September 19, 2024 @04:53PM (#41596285)
How? You add your signed cert explicitly to the trust store. You’re not just hitting “trust” every time.
[ Parent | on HN ]