4 ms·
> the non-technical audience who will click 'Get me out of there' or close the tab. This is the right thing to do. You do not attempt to second-guess a certifi
by saulrh 16y ago
> the non-technical audience who will click 'Get me out of there' or close the tab.
This is the right thing to do. You do not attempt to second-guess a certificate expiration for any reason. If you program in a way to ignore a bad security certificate, I can guarantee you that that will immediately be used to defeat the entire system, and that leads directly to grandmothers giving their credit card details to J. Random Phisher.
- Joakal 16y agoThe standard with scary messages (even a 5 minute expiry) with encrypted connections? Or the one where the standard is unencrypted connections? This is Wikipedia. Not a bank. I prefer some security over none.