AquaMail Forum

English - Android => General Discussion => Topic started by: Zorpheus on June 03, 2021, 08:01:39 am

Title: Is Aquamail checking if SSL certificates come from a trusted authority?
Post by: Zorpheus on June 03, 2021, 08:01:39 am

Hello,

Aquamail so often does not check emails for me because an SSL certificate has changed. This happens very often with Google and Microsoft mail addresses.
The only solution I found is to turn off messages for SSL certificate changes.
But is this secure? I also saw comments stating that they would not recommend this for security reasons. Also I saw comments that Aquamail just accepted certificates from self-certified servers.

I think the way of other apps, browsers and operating systems is to check with a trusted authority if the certificates are valid. Is Aquamail not doing this? Why? Maybe it is necessary in some countries to check all certificates by yourself, but I can't bother with that.