The problem i have with their "neutral, lacking security" icon is that it does n... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

zhng on Sept 5, 2014 | parent | context | favorite | on: Gradually sunsetting SHA-1

The problem i have with their "neutral, lacking security" icon is that it does not indicate that anything is wrong when in fact there is. https:// should never have a neutral icon. it should be VALID or INVALID.

Dylan16807 on Sept 5, 2014 | [–]

Heh, maybe they could extend it to self-signed being neutral...

JeremyBanks on Sept 6, 2014 | | [–]

I hope so, now that this has set the precedent.

sp332 on Sept 5, 2014 | | [–]

There's nothing wrong with a valid SHA-1 certificate.

bgentry on Sept 5, 2014 | [–]

At some point in the not-too-distant future, anything other than full 100% verified HTTPS should have a red "danger" icon.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact