- or using certificates from unknown authorities. If you trust the
- server you are connecting to, you can select <gui>Ignore SSL
- certificate errors</gui> to allow encrypted communication with
- invalid certificates.</p>
+ or using certificates signed by unknown authorities. You can select
+ <gui>Ignore SSL certificate errors</gui> to allow encrypted communication
+ with invalid certificates, but this allows an attacker to intercept your
+ communication with the server (including your password). You might want to
+ use this option for testing purposes, or if your server is broken and you
+ do not care about the security of your communication.</p>