Users should be able to safely ignore certificate changes. No one should need to install Certificate Patrol to have a safe experience. Of course, if the certif

Users should be able to safely ignore certificate changes. No one should need to install Certificate Patrol to have a safe experience. Of course, if the certificate changes to an untrusted one, the browser should flag it -- and if the server specifies HSTS, then the browser should block the user from clicking through anyway (increasing the pressure to make sure the cert is always trusted and unexpired).