3 ms·
That first case ("sites I use often") seems like a pretty big win. I want my browser crying holy murder if my bank or webmail cert suddenly changes.
by idlewords 12y ago
That first case ("sites I use often") seems like a pretty big win. I want my browser crying holy murder if my bank or webmail cert suddenly changes.
- amalcon 12y agoYes it is, which is why it's a good idea. Such a good idea, in fact, that OpenSSH security in practice relies on it! It still won't stop someone who really wants to compromise you, which means that you still will need to trust CAs from time to time.