Are your customers calling about "Invalid Certificate" yet?  They will.  This has hit us hard. An app update that discontinues our main method of logins for non-enterprise customers. Overnight the app blocked access to all of our customer's servers who have auto updates enabled for their mobile apps. (Which is a default setting).  

Milestone has listed their reasoning here & detailed why self-signed certificates are bad here.

I understand that using a self-signed certificate creates a hole in your security for man-in-middle attacks. However, small businesses don't really have the resources for a static IP, a domain name and an SSL certificate. Static IP's in my area are $20/month. No one wants to purchase this when ddns is so cheap.  

********* *** ******** * *** *** that **** ******* ****-****** ************ ****** Xprotect ****** ******* & ***.  ***** that's ****, ********** ** ********* ** manually **** ** *** ***** ***** again ** * ***** ** **** and *********. 

** ********* *** ***** **** ***** provide **** **** ********* **** ** option ** ******* ***** ****** ** a ********* ****** ************** ******. ******* that's ** *** *****, *** *** only ****.