On Mon, 2010-05-17 at 13:25 -0500, Marsh Ray wrote: > Imagine how fast sites would fix their certs if the scary page proposed > keyword alternative sites that did not have cert issues.
You can't assume that it's the site's fault. A competitor could be MITM-ing the connection and showing a bad certificate in order to have the browser suggest the competitor's site. -- Matt -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto