Author Topic: Is Aquamail checking if SSL certificates come from a trusted authority?  (Read 1357 times)

Zorpheus

  • Newbie
  • *
  • Posts: 2
Hello,

Aquamail so often does not check emails for me because an SSL certificate has changed. This happens very often with Google and Microsoft mail addresses.
The only solution I found is to turn off messages for SSL certificate changes.
But is this secure? I also saw comments stating that they would not recommend this for security reasons. Also I saw comments that Aquamail just accepted certificates from self-certified servers.

I think the way of other apps, browsers and operating systems is to check with a trusted authority if the certificates are valid. Is Aquamail not doing this? Why? Maybe it is necessary in some countries to check all certificates by yourself, but I can't bother with that.