Friday, March 25, 2011

Blindly trusting random SSL Certificate Authorities

More customizable and better certificate validation is needed. I would rather trust an expired self-signed certificate that I've seen before than a brand new CA-signed cert.

No comments: