[P5fRxh5kUvp2th]

I think they're saying self-signed certs are ok for encryption IF you can verify it's the right party, not that they're automatically ok.