bug#19404: 25.0.50; Gnus shows self-signed certificate warning when connecting to Gmane

[Lars Magne Ingebrigtsen]

Eli Zaretskii <eliz@gnu.org> writes:

> OK, let me rephrase: How can a user, a mere mortal, like myself or
> Dmitry, tell that this certificate is OK, while the one I was
> presented in my problem is not?

That's not generally possible.  Unfortunately there's no difference
between a certificate signed by a CA that you don't happen to have in
your CA bundle, and a self-signed certificate.  Unless I've
misunderstood something.

I think that's one of many unfortunate design choices made when the
certificate system was set up.

So the "(self-signed)" string we have in our warnings should perhaps be
changed to "(possibly self-signed)".

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no