Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
mapunk
on March 8, 2016
|
parent
|
context
|
favorite
| on:
Let's Encrypt has issued its first million certifi...
> Use a self-signed cert and ask your visitors via a side channel to tick the box to add an exception.
Don't do this. If you have to ask your users to add an SSL exception you're doing it very wrong.
_ikke_
on March 8, 2016
[–]
He was comparing the tls equivalent of how SSH works. First time you connect to an ssh server, you have to accept the host key, which most people do not (and in most situations, can not) verify.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
Don't do this. If you have to ask your users to add an SSL exception you're doing it very wrong.