help: caution users about using Ignore SSL Errors

[empathy.git] / help / C / account-jabber.page

diff --git a/help/C/account-jabber.page b/help/C/account-jabber.page
index 130b2acf32b9e8429f1cd192e6d5a1419b32a149..0fbc2bad7a2e0ce3d5859091026a0f6d1626c619 100644 (file)
--- a/help/C/account-jabber.page
+++ b/help/C/account-jabber.page
@@ -4,24 +4,30 @@
       id="account-jabber">
 
   <info>
+    <desc>Advanced options for Jabber and Google Talk accounts.</desc>
     <revision pkgversion="2.28" version="0.1" date="2009-08-27" status="review">
       <!--
       <e:review by="shaunm@gnome.org" date="2009-08-31" status="done"/>
       -->
     </revision>
+    <revision pkgversion="3.12" date="2015-02-03" status="review"/>
     <credit type="author">
       <name>Shaun McCance</name>
       <email>shaunm@gnome.org</email>
     </credit>
+    <license>
+      <p>Creative Commons Share Alike 3.0</p>
+    </license>
+<!--
     <copyright>
       <year>2009</year>
       <name>GNOME Documentation Project</name>
     </copyright>
-    <desc>Advanced options for Jabber and Google Talk accounts.</desc>
     <include href="legal.xml" xmlns="http://www.w3.org/2001/XInclude"/>
+-->
   </info>
 
-  <title>Jabber Account Details</title>
+  <title>Jabber account details</title>
 
   <p>Most Jabber accounts will require only a login ID and a password
   to connect.  For some accounts or on certain types of networks, you
@@ -45,10 +51,12 @@
       required</gui> to prevent <app>Empathy</app> from communicating with
       the Jabber server when encryption is not possible.</p>
       <p>Some Jabber servers may encrypt data using invalid certificates,
-      or using certificates from unknown authorities.  If you trust the
-      server you are connecting to, you can select <gui>Ignore SSL
-      certificate errors</gui> to allow encrypted communication with
-      invalid certificates.</p>
+      or using certificates signed by unknown authorities.  You can select
+      <gui>Ignore SSL certificate errors</gui> to allow encrypted communication
+      with invalid certificates, but this allows an attacker to intercept your
+      communication with the server (including your password). You might want to
+      use this option for testing purposes, or if your server is broken and you
+      do not care about the security of your communication.</p>
     </item>
     <item>
       <title><gui>Resource</gui></title>