4 ms·
What if there were a middle ground between browsers trusting and rejecting a CA? What if there were a yellow "proceed with caution" warning on sites using certi
by DavidSJ 10y ago
What if there were a middle ground between browsers trusting and rejecting a CA? What if there were a yellow "proceed with caution" warning on sites using certificates issued by CAs that have very occasionally behaved improperly?
- pfg 10y agoIf this gets implemented in a way that's clearly visible to the user, the effects on the CA are almost indistinguishable from the death sentence. The vast majority of customers would switch to some competitor that's not affected. Even a handful of saved customer support cases due to this warning is going to make up for the cost of switching. Most importantly, if users are confronted with warnings all the time, they become increasingly oblivious to them and might very well click through more important warnings down the line.
- walrus01 10y agoGiven the propensity of normal end users to click "OK/Accept" through just about anything, I don't think this is a good idea, as another poster points out. There's a reason why it's a multi-step process/warning in Firefox or Chrome to accept a self-signed or invalid SSL certificate from an httpd. If it's a single click yellow warning banner it could do real harm to widespread use and trust of https.
- yuhong 10y agoNetscape used to have support for something similar. I think another idea would be an icon in the address bar.