Here is a modest suggestion from the devil's advocate: web browsersshould forbid self-signed SSL certificate entirely, with no 'no,really, let me through' button, option, or extended dialog . They should do this because in practice and ingeneral there is no way to make self-signed SSL certificates at allsecure.

Self-signed certificates are insecure in general unless you reallytruly know what you are doing. Most users do not know what they aredoing in this sense, and for