Hacker News Reader

It would also be fascinating to know what sort of compromises if any are needed to allow this change to occur for operations in China.

Some major chinese browser doesn't validate any cert at all, even self signed is perfectly OK (360 Browser, very large install base)/