[untog]

Before everyone gets hysterical, please vote ^^^ that comment up. It's a self-signed cert, it is not used in production:

https://news.ycombinator.com/item?id=6875023

[bradleybuda]

Yep. Though it opens up a (probably hypothetical) potential attack if this cert is widely trusted on, say, Guardian employees' development machines.