Re: SSL cleanups/hostname verification

Robert Haas wrote:
>>> How can you make that the default?  Won't it immediately break every
>>> installation without certificates?
>> *all* SSL installations have certificate on the server side. You cannot
>> run without it.
> 
> s/without certificates/with self-signed certificates/
> 
> which I would guess to be a common configuration

Yeah, but those setups are already broken anyway; the users just appear 
not to know it.

If you install a new web browser, would you want it to be configured by 
default to warn about untrusted certificates or to "not bother" the user 
about it?  It's pretty much the same question here.