Author Topic: SSL Certificate checking  (Read 4229 times)

Offline usenet4life

  • Contributor
  • ***
  • Posts: 3
SSL Certificate checking
« on: February 20, 2016, 06:22:21 PM »
How does allbinz establish secure ssl connections to usenet servers?  Does it implicitly trust all certificates from usenet providers? That would be bad as it would be susceptible to man in the middle attacks.  Or does it have a collection of signed root certificates from reputable certificate authorities? 

I am curious how up to date usenet providers are at having valid ceritifcates.  For example, I don't think astraweb has a valid ceriticate, if you go to https://www.news.astraweb.com you will see a warning in your browser