Peio Ziarsolo [2008-05-07 13:03 +0200]:
> But for power user that know the significance of a bad certificate it's
> annoniying add exceptions (this morning I have to add 3 esceptions).

This doesn't have anything to do with power users/n00bs. An invalid
SSL certificate isn't any better or worse depending on the type of
user. If a site sets up SSL with an invalid certificate, then this
buys the user nothing but a false sense of security.

The proper approach to this IMHO is to make adding exceptions in all
web browsers (especially IE) as hard and explicit as in Firefox 3.
This would perhaps force site admins to get a grip and stop ignoring
broken SSL certs, once they get a flood of complaints.

> Is there any key to toogle off this new feature? 

I *so much* hope that there isn't. People should really start to
understand that this is a SERIOUS error and shouldn't at all be
considered 'normal'.

Martin

-- 
Martin Pitt                        | http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)

Attachment: signature.asc
Description: Digital signature

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss

Reply via email to