2 ms·

So, we agree: it's strictly better

• jedberg 10y ago
  It's not strictly better -- it gives a false sense of security. As you plainly showed by believing that having https at a Starbucks with an untrusted cert is safe, which it is clearly not. Security involve both a technical and social aspect. While the unsigned cert may offer better security (but there is no way for you to know) it most certainly offers a worse social aspect, that being a false sense of security. So I'd say you're wrong -- it is strictly worse, because it offers no better security but a worse sense of security.