what does a self-signed outdated ssl cert worth? [https] could it be tricked [https] in a way, that the end user will not recognize? [e.g. he already accepted the cert one time, and the browser would warn her, if it been ""attacked""?] ..I mean does an outdated self-signed certificate give the same security as a normal cert? thanks --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx