Hacker News new | ask | show | jobs
by anamexis 632 days ago
It's not that you're trusting your own certificate, it's that you're trusting any self-signed certificate, leaving you open to getting MITM'ed.
3 comments

Why would this oblige the client to trust any self-signed cert as opposed to trusting all certificates whose chain of trust can be established using the system's trust store? The reporter isn't asking for mail to automatically trust untrusted certificates, they have added them to the trust store.
Can't you install trusted certificates by hand on iOS?
Yes, and you still can. That's not broken.
Based on the bug report I think it is. Mail is not respecting the self signed certificate that’s been added to the user trust store.
How? You add your signed cert explicitly to the trust store. You’re not just hitting “trust” every time.