> what about the cert check, suggested by Marc? Ben's comments in the bug also
> seem to indicate that simply changing the URL won't fix it.
It will provide unauthenticated encryption, which is better than no encryption. Only prevents casual eavesdropping, not MITM, but that fix is bit more involved.
> what about the cert check, suggested by Marc? Ben's comments in the bug also
> seem to indicate that simply changing the URL won't fix it.
It will provide unauthenticated encryption, which is better than no encryption. Only prevents casual eavesdropping, not MITM, but that fix is bit more involved.