[Users] [Bug 3660] SSL Cert change shown on previously accepted certificates.

Paul claws at thewildbeast.co.uk
Mon Aug 8 09:36:55 CEST 2016


On Mon, 8 Aug 2016 15:40:17 +1000
blind Pete <peter_s_d at fastmail.com.au> wrote: 

> "Automatically accept valid SSL certificates" is the thing to do for
> Gmail.  (Set ssl_certs_auto_accept=1 in accountrc.)  It introduces a
> small security risk, but all of the other alternatives are worse,
> and if you were serious about security you probably would hesitate
> to use Gmail. 

It is not the "thing to do for gmail" but generally the thing to do.
It's what most people do, for example, when using their browsers.
There is no 'small security risk' introduced by doing this, apart
from the inherent risk (if any) of relying on certificates in general.
I don't know where you come up with your summary.

with regards

Paul



More information about the Users mailing list