Linked by Thom Holwerda on Fri 29th Aug 2008 13:23 UTC, submitted by irbis
Mozilla & Gecko clones Firefox 3.0, released not too long ago, was generally well-received. It added a load of new features, while also providing much-needed speed improvements and better memory management. Some new features, however, have met more resistance - one of them is the rather complicated user interface thrown at users when they reach a website with an invalid or expired SSL certificate.
Permalink for comment 328503
To read all comments associated with this story, please click here.
Cert Authority System's Fault
by braddock on Fri 29th Aug 2008 13:50 UTC
braddock
Member since:
2005-07-08

This is not the fault of Firefox as much as it is the fault of the completely dysfunctional Certificate Authority system currently in place.

If I could AFFORD a valid cert, I wouldn't have a self-signed cert, and wouldn't direct all my users to use un-encrypted HTTP on my site.

The Mozilla foundation should step up to the plate and recognize a saner community-based non-profit certificate authority. They have the market share to make this happen. They control this now based on what certs they choose to ship with. Now is the time.

Reply Score: 4