3 ms·
It's only recently that it's become reasonable to add interstitials without annoying everyone. Firefox in HTTPS-Only mode does exactly that. A bad certificate
by andrewaylett 5y ago
It's only recently that it's become reasonable to add interstitials without annoying everyone. Firefox in HTTPS-Only mode does exactly that.
A bad certificate is a sign that something's actively wrong while (at least historically) no certificate doesn't really give a strong signal.
- Karunamon 5y agoThe problem is that those classes of wrongness are treated identically when they are emphatically not: scary, hard-to-understand-by-users warnings, if not outright inability to connect in some cases. A cert that's a day out of its expiration time has zero implications to the confidentiality and identity of the parties to the connection. The same cannot be said about a bad CN or signature.