On: SSL Still Mostly Misunderstood

[axod]

Still pops up warnings for users in browsers.

[chowmeined → axod]

As they should. Since there is no way to verify the remote server then the connection is vulnerable to man-in-the-middle attacks. In that situation an attacker can simply pretend to be the server and decrypt your traffic.