How does allbinz establish secure ssl connections to usenet servers? Does it implicitly trust all certificates from usenet providers? That would be bad as it would be susceptible to man in the middle attacks. Or does it have a collection of signed root certificates from reputable certificate authorities?
I am curious how up to date usenet providers are at having valid ceritifcates. For example, I don't think astraweb has a valid ceriticate, if you go to
https://www.news.astraweb.com you will see a warning in your browser
