[clone1018]

Wouldn't this allow someone to do a full man in the middle attack with a compromised server/dns server?

[pritambaral]

If it were the actual cert they're using, yes.

[clone1018]

Oh I see now that it's just the self signed cert. Awesome :)