On Mon, Apr 20, 2015 at 10:01 PM, Andrew Kay <[email protected]> wrote:

> So plaintext is BETTER than SSL or TLS, and caps lock is BETTER than
> logic. Got it. Please never try to give advice about security again.


Just because using a self-signed cert enables encryption does not
automatically make it somehow better than plain text. The danger of using
one is that anybody can generate one, including a man-in-the-middle
attacker. Stealing your login in this way is no more challenging than
intercepting it in plain text. The self-signed cert does nothing more than
provide a false sense of security. At least with plain-text, the danger is
known but like I said before, it's probably only a matter of time before
they stop supporting that too (Microsoft already have FYI).

-- 
Marko

-- 
You received this message because you are subscribed to the Google Groups 
"Gmail-Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/gmail-users.
For more options, visit https://groups.google.com/d/optout.

Reply via email to