Without a cert etc most people shouldn't be installing the applicarion at all. Thats the simple advice for most people, especially if some other trust is already in place, eg from someone you actually trust.