Well, the connection is definitely encrypted. Regardless of a man in the middle or not ;) However - I see your point. My suggestion would be, that we allow yet another userscript to handle this. I for one do not care for verifying certificates. But for those who do, some kind of interface would be nice, woudln't it?
Surma
