Self signed certificates do not prove integrity. A crab in the middle can generate another self signed certificate for the same domain name and your browser wil

Self signed certificates do not prove integrity. A crab in the middle can generate another self signed certificate for the same domain name and your browser will not know that it isn't the one you expected. The only workaround is to manually add the certificate to the root store. But this depends on securely receiving the certificate - say by physically transferring it from one computer to another by USB stick.