AW: understanding

[Alan DeKok]

Heinrich, Sebastian wrote:
> But a TLS tunnel can be established with the standard certificates given in the certs subdirectory. Creating new certificates is only a security improveness when checking them?

  Yes.

> Is there any security improveness of creating new certificates and don't checking them?

  If you don't check the certs, then they don't exist, and they don't
add security.

  Alan DeKok.