4 ms·

This is wikipedia, learning stuff so eavesdroppers can't read the connection. I hardly think a massive "This Connection is Untrusted" for a 5 minute expired ce

• mooism2 16y ago
  For what period after a certificate expires is it safe to rely upon? Why are you trusting your judgement (in your capacity as a browser vendor) over that of the certificate issuer? I ask again, why do you blame Firefox for warning (however apocalyptically) about an expired certificate, and not Wikipedia for using an expired certificate on a public server?
  • Joakal 16y ago
    An analogy would be a Tsunami alert given for massive water coming in. However, the alert will still be the same even for high tides which occur often but doesn't affect more than the beaches, leading residents to ignore it until the big diaster comes. I believe FF's generic warning is a cry wolf that puts the hidden messages of lapsed security (expires recently) with the lack of security (certificate is not valid). I do understand that there might be users who'll second guess, but if the UAC experience results has said anything, users may eventually assume it's a generic message albeit with technical details and quickly skip over the warnings to get to the website. Either way, I wish the Internet would default to encrypted rather than unencrypted because generic warnings like this encourage the latter.