pishpash
Joined 9 years ago
Joined 9 years ago
You can add other options too, "Trust for 30 days" or something. I wish SSH known hosts has an auto-expunge.
[Do Not Trust], [Trust Once], [Trust Forever]"
But even if not, you get asked whether to turn on Siri, whether to send telemetry, whether to sign away your rights, etc., all of which are consequential but prompts are massaged in a way where it's nice and easy for the user to answer a certain way without having a clue. Makes me think user comprehension isn't even a problem.
Where I suspect the problem lies is that it will not fly to make it seem like US-based CA's are more trustworthy just because the majority of sites roll up to them. Then you'll need to do some non-country-specific human tiering, and who's the judge of that?