Re:What's the right UX for an expired certificate?
by jen20 on Wednesday January 18, 2023 @09:59AM
(#34427377)
> literally nothing at stake if somebody is able to read my traffic to or from this unimportant site.
> There's even less at stake when it comes to the cryptographic security of some blog.
This would only be the case if ISPs were not adversarial. In the US - for most people - They are, though.
On the other hand, if my e-mail provider's certificate is expired, there's a little more at stake, and there are other services where the HTTPS security being broken can cost me money. Those I do care about.