An anonymous reader writes "In a recent study researchers from Stanford and U.T.Austin discovered that many popular applications break or disable certificate validation when using HTTPS. As a result their HTTPS connections are not properly authenticated making them vulnerable to man-in-the-middle attacks. Their FAQ gives a brief overview of the issue." Link to Original Source
What is mind? No matter. What is matter? Never mind.
-- Thomas Hewitt Key, 1799-1875