you all still do not understand certificates

hi there!

you all (developers, users, jabber-server admins) still do not understand
what are ssl certificates for!!

Developers: exodus accepts ANY server certificate (even fake from
monkey-in-the-middle - MITM)
Users: always clicking YES to any certificate warning (in internet explorer,
psi jabber client etc.)
Server admins: it's OK you have self-signed certs, but at least set correct
validity period and host name

you all do not understand HOW EASY is to do i.e. arp-poisoning to hijack
traffic and become MITM sniffer (injector)

think about it

Vlado.