The new unsigned SSL warnings are a massive overreaction - so much so that I think Mozilla must have a deal with some certificate root companies to match their Google deal.

For a great deal of what goes on over the internet unsigned SSL is just fine. You don't care who you are dealing with, you just care that no one else can listen in (and sometimes that it is the same guy as last time). You only need authentication for banking, shopping and a few other corner cases.