Hacker News new | ask | show | jobs
by cheald 5697 days ago
By accepting the certificate, you've indicated that you trust that the certificate is genuine. At that point, it's as good as any CA-signed certificate. The only difference is that you made a decision to trust the certificate, rather than trusting a CA to verify its authenticity.