Hacker News Reader

more protected from what?

- protected from third parties reading the data in transit

- protected from alteration of the data in transit without either end's knowledge

and, IF you have a means to authenticate the owner of the certificate outside of the regular certificate signing process

- protection from impersonation of the other end of the connection

my point is that TLS can still be useful without the participation of a certificate authority. but you have to be careful.

Right. I've visited Ted's site in the past, and had no certificate warnings. Now, suddenly, I am getting warnings. So isn't that the exact scenario in which I should be very suspicious?

It's just a blog; I'm not submitting anything, but still it's an indicator that something fishy might be going on.

Reply on news.ycombinator.com