Hacker News Reader

> If internal PKIs were easier to make work across all OS and Browser combos I’d just use those instead

Even if you use your own PKI, if your certs have a validity > 1 year, won't browsers still complain?

The fact that, as a user, I can't tell a browser "hey, this internal PKI that you already don't trust, just go ahead and trust it no matter what because I tell you to," feels bad.

Reply on news.ycombinator.com