I want to create a client & server package with the option of an encrypted connection.
From my limited understanding, to get HTTPS connections working, the user needs their own certificate installed on their machine and this means that the client software needs to allow all certificates (with a user-specified public key/thumbprint?).
I'm new to the concept of certificates so I don't know about any of the associated dangers here. Could you please briefly list some problems with this approach?