Hacker News Reader

But nothing stops companies from doing this today, without forcing everyone to make the change also.

You can refresh your cert every single day. the cert that gives me https on my home routers web interface doesn’t need that level of scrutiny.

View on HN

The browsers aren't going to let you not automate, because automated certificate issuance is safer and better for the ecosystem. Your convenience and the ease with which you can provision the interface to your router, which only you use, is not going to be a factor in that decision.

What does "safer and better for the ecosystem" even mean? Either there is a plausible threat model to defend against or there is not.

Reply on news.ycombinator.com