firefox and bad ssl certificates

[Scott Kitterman]

On Wednesday 07 May 2008 20:34, HggdH wrote:

> 100% with you. But it all has to start with education, not just forcing
> a new feature down the user's throat. For most casual users, this
> education is -- from my own experience with casual and theoretically
> technical users -- not easy. And I do understand X509 & friends.
>
> On this point, I wonder if we are just making it a bit harder what most
> users have been doing for ever. All we will get is grumbling, *unless*
> we also provide clear, short, nice, reasonable, explanations.
>
> Ah well.
>

While we're on this topic, I think point number 5 in this essay bears 
re-reading:

http://www.ranum.com/security/computer_security/editorials/dumb/

Scott K