3 ms·
It's not that you're trusting your own certificate, it's that you're trusting any self-signed certificate, leaving you open to getting MITM'ed.
by anamexis 2y ago
It's not that you're trusting your own certificate, it's that you're trusting any self-signed certificate, leaving you open to getting MITM'ed.
- darknavi 2y agoCan't you install trusted certificates by hand on iOS?
- anamexis 2y agoYes, and you still can. That's not broken.
- digitalPhonix 2y agoBased on the bug report I think it is. Mail is not respecting the self signed certificate that’s been added to the user trust store.
- denkmoon 2y agoWhy would this oblige the client to trust any self-signed cert as opposed to trusting all certificates whose chain of trust can be established using the system's trust store? The reporter isn't asking for mail to automatically trust untrusted certificates, they have added them to the trust store.
- bdavbdav 2y agoHow? You add your signed cert explicitly to the trust store. You’re not just hitting “trust” every time.