• thepreciousboar@lemm.ee
    link
    fedilink
    arrow-up
    5
    ·
    11 days ago

    Also certificate does not ensure the website is safe, only that you are really talking with the server the URL points to, and not a man-in-the-middle trying to hijack your information (like passwords or payment details).

    Nothing stops a malicious site to have a valid https certificate. Sure, more spam-friendly Certification Authorities like Let’s Encrypt might revoke spammy certificate, but that’s not nevesserily always true.