Hacker News new | ask | show | jobs
by cbr 2914 days ago
Anyone can get an HTTPS cert, and with Let's Encrypt it's free. Restricting dangerous features to only websites that can demonstrate their traffic hasn't been man-in-the-middled is very different from giving established sites more expansive permissions.

(Disclosure: I work at Google, though not on browsers)