The Problem of Trust

One of the inventors on SSL was interviewed on CNET recently and threw out this gem of a quote:

We had this fight early on in the Internet days: What do we tell the user to do when there is an expired certificate? Security professionals always struggle with the general public because usability always wins. When you get an expired certificate, the site owner or organization would always prefer to ...