Hacker News new | past | comments | ask | show | jobs | submit login

The problem i have with their "neutral, lacking security" icon is that it does not indicate that anything is wrong when in fact there is. https:// should never have a neutral icon. it should be VALID or INVALID.



Heh, maybe they could extend it to self-signed being neutral...


I hope so, now that this has set the precedent.


There's nothing wrong with a valid SHA-1 certificate.


At some point in the not-too-distant future, anything other than full 100% verified HTTPS should have a red "danger" icon.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: