we're now moving to a "if its self signed, you can't access the site, you can't bypass the check even".
wait wait wait what?
I am currently in a space where we have to deal with self-signed certificates all the time. I fully accept that people like me will have to deal with more hassles from this so that people don't get their paypal accounts hijacked as easily. But I've yet to find out that I simply cannot connect to a site with a self-signed certificate.
But then again, we're now moving to a "if its self signed, you can't access the site, you can't bypass the check even".
I wonder how much verisign pays some of us.