News for hackers. Stuff that matters.

A comment on Let's Encrypt has issued its first million certificates. Parent comment

Re:Let's Encrypt has issued its first million certificates by mapunk on Tuesday March 08, 2016 @10:51AM (#11245957)
> Use a self-signed cert and ask your visitors via a side channel to tick the box to add an exception.

Don't do this. If you have to ask your users to add an SSL exception you're doing it very wrong.

[ Parent | on HN ]
Re:Let's Encrypt has issued its first million certificates by _ikke_ on Tuesday March 08, 2016 @01:59PM (#11247578)
He was comparing the tls equivalent of how SSH works. First time you connect to an ssh server, you have to accept the host key, which most people do not (and in most situations, can not) verify.
[ Parent | on HN ]