3 ms·
There is nothing wrong with self-signed certificates. If you need to trust a website that uses self-signed certificates, just make sure to verify out-of-band.
by hadoukenio 13y ago
There is nothing wrong with self-signed certificates. If you need to trust a website that uses self-signed certificates, just make sure to verify out-of-band.
- ScottWhigham 13y agoYes, I trust my own self-signed certs and I might trust the self-signed certs of certain sites. However, telling me that "There is nothing wrong with self-signed certificates." is irresponsible IMO. Who runs "peereboom.us"? #### if I know. I'm going to tell FF "It's okay - I'm good" this time b/c I'm not doing anything that matters but, as a rule, self-signed certs for unknown sites is not okay.
- ghshephard 13y agoWould you trust visiting a site that's just HTTP? Self signed certs for unknown sites are fine. There is zero problem visiting them.
- hadoukenio 13y ago@ScottWhigham I'm not being irresponsible. I'm with ghshephard on this one.
- markwakeford 13y agoahmen
- lkd 13y agoSelf-signed certs are OK in every scenario that HTTP would be OK, and then some.
- kzrdude 13y agoThere are two problems in Firefox: * The excepted site displays the exact same padlock icon as hacker news for example * "Add exception permanently" is selected by default.
- hadoukenio 13y agoWhat does that have to do with self-signed certificates in general rather than an issue with your particular browser?