Comment

Comment by brian-armstrong

Why would you ever accept a mismatched certificate? Even assuming that you think your ISP has no nefarious plans, are you going to be able to rigorously confirm it's their certificate? At that point you've bypassed all the mechanisms in your browser that do this heavy lifting for you.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton