Re:Ask HN: What's your solution for SSL on internal servers?
by dboreham on Wednesday February 09, 2022 @08:45AM
(#30272509)
There is a long history to this. The original browser warnings were along the lines of your suggestion. Then it was discovered that regular users just clicked through the warning when an attacker MITM'ed their bank. There followed decades of making the warning ever more scary sounding and ever more difficult to bypass.
[ Parent
| on HN ]
Re:Ask HN: What's your solution for SSL on internal servers?
by savolai on Thursday February 10, 2022 @04:42AM
(#30284157)
Where does responsibility lie here? Is there a mechanism for users to state trust towards their org's sysadmin instead of a global authority? If there isn't, what is the problem preventing this in the long history you mention?