# Reply by email SSL self signed certificate error

**URL:** <https://meta.discourse.org/t/reply-by-email-ssl-self-signed-certificate-error/30868>\
**Category:** Support\
**Created:** [7 Luglio 2015, 6:40pm UTC](https://meta.discourse.org/t/reply-by-email-ssl-self-signed-certificate-error/30868 "2015-07-07T18:40:39Z")\
**Posts on this page:** 1\
**Showing post:** 25

<div class="post-metadata">

**Author:** ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)\
**Post date:** [12 Agosto 2015, 8:41am UTC](https://meta.discourse.org/t/reply-by-email-ssl-self-signed-certificate-error/30868/25 "2015-08-12T08:41:47Z")

</div>

As long as you don’t implement some kind of verification (only allowing specific certificates), disabling verification makes the certificate almost worthless. You know that your traffic is encrypted, but not with whom you’re communicating.

With the settings you recommend, any active network attacker can easily man-in-the-middle the connection by presenting another self-signed certificate he created himself.

---

_[View the full topic](https://meta.discourse.org/t/reply-by-email-ssl-self-signed-certificate-error/30868)._