News for hackers. Stuff that matters.
Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by julian37 on Tuesday September 25, 2012 @08:19PM (#4573528)
tptacek explained to me once how using a self-signed certificate (or more to the point, trusting it) is a bad idea: http://news.ycombinator.com/item?id=2376644

You can get free certificates backed by a CA trusted by most browsers, for example at https://www.startssl.com. There are some limitations (e.g. no wildcard certificates) but it's still much better than a self-signed one.

Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by mgummelt on Tuesday September 25, 2012 @09:09PM (#4573703)
Though using self-signed certs during development is a perfect way to test https without shelling out for a CA signature.