5 ms·
Terrible compared to what? http? I don't understand why we get big scary warnings from browsers for self signed https, but never a peep out of them when submitt
by cowbell 12y ago
Terrible compared to what? http? I don't understand why we get big scary warnings from browsers for self signed https, but never a peep out of them when submitting the same form over http.
- nav1 12y agoBecause encountering a site with a self-signed certificate likely means that the connection is MITM'd. In any case, with a self-signed cert you can't who you're connecting to.
- itistoday2 12y agoCA-signed certificates do not mean that you are not being MITM'd. They are actually worse in that they give everyone (including the browser) a false sense of security that you have to pay for. See detailed reply here: https://news.ycombinator.com/item?id=7826443 https://news.ycombinator.com/item?id=7826443