Comment by droffel

Without a valid certificate, any ISP MITM attacks would be obvious