>There's one solution that the author didn't cover: Start treating self-signed certs as unencrypted. Firefox recently supports this in a way through opportunis

>There's one solution that the author didn't cover: Start treating self-signed certs as unencrypted. Firefox recently supports this in a way through opportunistic encryption! HTTP connections can include a header to tell the browser to contact the server over HTTPS and ignore certificate errors. The connection is shown as HTTP to the user, but you get the benefit of a self-signed certificate that blocks passive eavesdroppers.