Easy question on SSL cert's

[devhen]

Alright, here's a quick an easy one:

If I access a web site through https://... but the site either doesn't have a certifcate installed or the cert is expired, is the info I'm getting still being encrypted? What exactly are the security concerns of using such a site?

Thanks.

[Chazzy]

Quite possibly still being encrypted but not entirely trusted..

I wouldnt use it for anything sensitive (which rules out the need for https).

Not 100% sure though but I wouldnt trust it. How long ago did the cert expire?

[Chazzy]

I just read, if it doesnt actually have one installed then chances are its a fake and i wouldnt trust it