Comment 1 for bug 239360

Revision history for this message
In , Nelson-bolyard (nelson-bolyard) wrote :

Suggested enhancement to the text of the blurb for self signed certs:
old: If you know you can trust this certificate,
new: If you have verified the certificate's contents with the person who
issued it, and know that it is really the correct certificate for this site,

Next suggestion: After fetching the cert, show it to the user and ask him
to verify its contents. Show him the "fingerprints", and ask the question:
Is this the certificate you believe is correct for this site?"