On: SSL Still Mostly Misunderstood

[gthank]

Then generate your own certs and self-sign.

[jcl → gthank]

As I understand it, self-signed certs leave you open to man-in-the-middle attacks.

http://news.ycombinator.com/item?id=277284

[axod → gthank]

Still pops up warnings for users in browsers.

[chowmeined → axod]

As they should. Since there is no way to verify the remote server then the connection is vulnerable to man-in-the-middle attacks. In that situation an attacker can simply pretend to be the server and decrypt your traffic.