News for hackers. Stuff that matters.

A comment on iOS 18 breaks IMAPS self-signed certs. Parent comment

Re:iOS 18 breaks IMAPS self-signed certs by ehhthing on Thursday September 19, 2024 @04:50AM (#41589884)
iOS never supported this configuration regardless, a change in SSL certificate does not cause any kind of notification to the user.

Also, you're basically objecting to the entire idea of PKI for use in IMAP which is incredibly hard to justify. Perhaps you wish to use a different model for your own personal reasons but the default being PKI should not be controversial, and if you want to use your own model you should use a different mail client.

[ Parent | on HN ]
Re:iOS 18 breaks IMAPS self-signed certs by detourdog on Thursday September 19, 2024 @05:13AM (#41589986)
It did support it. One had to trust the certificate manually. I gave up on self-signed cents about 6 years ago.
[ Parent | on HN ]
Re:iOS 18 breaks IMAPS self-signed certs by ehhthing on Friday September 20, 2024 @12:32PM (#41603569)
It supported using self signed certs, but if the server suddenly switched from a self signed to a trusted CA-signed certificate, no prompt would be given. So the idea that self signed certificates are somehow more secure for this specific purpose is incorrect.
[ Parent | on HN ]
Re:iOS 18 breaks IMAPS self-signed certs by detourdog on Saturday September 21, 2024 @05:27PM (#41612774)
It was a complex Trust relationship and Apple’s it just work was onerous to work around. When security is the top priority I would alway go with self-signed certificates.
[ Parent | on HN ]