4 ms·
But it mandates that you click through an SSL warning, which no user should ever have to do unless they are actually testing SSL-related stuff. Otherwise, it's
by finnn 11y ago
But it mandates that you click through an SSL warning, which no user should ever have to do unless they are actually testing SSL-related stuff. Otherwise, it's just teaching everyone bad practices.
- nine_k 11y agoIf self-signed certs are accepted silently and shown as "not secure", the way plain HTTP is accepted and shown (per https://news.ycombinator.com/item?id=9472037 https://news.ycombinator.com/item?id=9472037 proposal), the user won't need to click through anything. Self-signed HTTPS is in no way less secure than unencrypted HTTPS.