> How can you (or an 'average user' whoever that might be) carefully evaluate untrusted certificates? Well, you decide whether you want to trust the person on

> How can you (or an 'average user' whoever that might be) carefully evaluate untrusted certificates? Well, you decide whether you want to trust the person on the certificate, and if the security ever changes again that'd be the red flag. Initial trust is always difficult.