4 ms·
Not encrypting is better than not revoking a compromised certificate. A compromised certificate gives the user the impression that the connection is secure when
by clinta 11y ago
Not encrypting is better than not revoking a compromised certificate. A compromised certificate gives the user the impression that the connection is secure when it's security is compromised. A plaintext connection makes no false claims.
- mikeash 11y agoIn which case if you don't want to pay for revocation, you could just revert back to an unencrypted connection.