Discussion on:

Solutions to an Android email and untrusted server certificate problem

Is there a way to import CAs or other certificates into Android? Checking the "Always accept" is a HUGE security rick because it leaves you open to man in the middle attacks (i've demonstrated this to several of my clients and it's a little scary)

What do I do if it doesn't get as far as connecting when the certificate error comes up? Is there a global mail setting I can change? I can't find anything. I'm using a HTC Desire S running android 2.3.5 and HTC Sense 3.0