zlacker

Why do you prefer a self signed certificate instead of using let's encrypt?

You can create a self signed CA and add it to trusted roots to avoid warnings.

>>wolf55+(OP)
Because it does not rely on any 'authority'. The increasingly scary warnings by browser vendors is in stark contrast to zero interest in detecting MITMs and warning users. The next step could very well be the disabling the ability to add exceptions for self signed certs.

Why not promote content encryption or explore other ideas that do not rely on central authorities, and we can see there are always workaround for corporates but individuals are thrown under the bus.