RE: going around the crypto

[Alan Ramsbottom]

> At one point, IE wouldn't even give you the option of continuing
> the connection. I'm not sure what it does now.

IE5 gives you one or more warnings (unknown CA, invalid cert date, URL-CN
mismatch) and asks if you want to proceed. 

It can also check CRLs, but the feature is disabled by default (doubtless on
standards/compatibility grounds).

-Alan-