[saurik]

But without a CA, the current SSL system (which I agree sucks) does not actually offer much security: your "secure channel" can be trivially man-in-the-middle'd.

[hd4]

I thought we were all using TLS..