Surprising Certificate Authority validation gotcha | Hacker News Reader