Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Google's had fraudulent SSL certificates issued for their domains.

enter image description here

So, the question I have is, "How do I make sure Pidgin/Empathy trust the correct certificate?"

share|improve this question
DO NOT accept a self-signed certificate from Google! – Nathan Osman Sep 2 '11 at 17:49
In fact, DO NOT accept a self-signed certificate from anyone, unless you are perfectly, 100%, absolutely sure what you're doing (which is the exact opposite of "naah, what could possibly happen?" or "meh, some guy on teh intarwebs sez it's okay"). – Piskvor Sep 2 '11 at 18:23
Thanks George, Piskvor, but that isn't an answer. ;) – James Sep 2 '11 at 18:31
up vote 1 down vote accepted

It really comes down to; who do you really trust? I personally would create my own self-signed certificate and would simply use that one. This is because I Know I created it and I was not relying on a third-party that could be or will be compromised. So then you would just need to trust yourself;)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.