> If it causes that much irritation, have you considered making your own CA, adding it to your browsers, and then using that to sign your temporary certificates

> If it causes that much irritation, have you considered making your own CA, adding it to your browsers, and then using that to sign your temporary certificates? A good fix but under the light of the looming issues describe in the link above: why invest all that time implementing and then defending this feature in the first place - for a negligible (at best) security benefit?