> An invalid certificate is far more likely to be an attack than a misconfigured server. I don't believe that. I've run into tons of self signed/invalid certs

> An invalid certificate is far more likely to be an attack than a misconfigured server. I don't believe that. I've run into tons of self signed/invalid certs that weren't attacks. If you're implicitly limiting your statement to large sites (paypal, amazon and the like) then you're probably right. But unqualified, it is definitely not the case.