Cryptography achileus heel is the UI.

Think of PGP, adding a new key toyour browser, creating a certificate, adding an exception... Always unintuitive CLI.

In terms of UI, I still don't get why for firefox a clear text password other an unencrypted connexion is not worse than a self signed certificate (it should be identically considered dangerous).

The only crypto UI I can use is ssh.