[robryk]

It baffles me why do all browsers pretend that https with an untrusted certificate is worse than plain http.

[doomtop]

I think because with plain http there should be no illusion of security.

[robryk]

Do you mean "we expect people not to have an illusion of security" or "we would want people not to have an illusion of security"?

I posit that this actually creates an illusion that http is better than "insecure" https.