From time to time I use surf, but it isn't a fair example of what is hard. Suckless.org's philosophy means you may need to recompile for any configuration change and something like trusting a self-signed cert is often done via configuration.