Re: Draft finding - "Transitioning the Web to HTTPS"

> The alternative an entity not a million miles away from my desk
> uses is to just self-sign and expect us to click through the resulting
> warnings. . .

My +1.
Please make browsers reasonably acting when contacting web-site that presents self-signed, expired, and other such certificates are used.
The crypto still happens, it's just less verified.

Paul

Received on Monday, 19 January 2015 11:51:46 UTC