"let the user install their own certs should not exist"

are you sure that this is not opening to more attack vector ?????

LtWorf 4 hours ago | parent | next [-]

Users aren't supposed to be considered an attack vector. I don't care what the advertisers think.

axus 3 hours ago | parent | next [-]

The infected devices on the LAN are an attack vector, though.

	▲	mapontosevenths 3 hours ago \| parent [-]
		If I want my IOT garbage to be infected that's between me and my local botherder. The vendor loses the right to decide how my things are used the minute they take my money.

antonvs 3 hours ago | parent | prev [-]

Users are attack vectors in one of the more commonly successful attacks: social engineering.

	▲	gus_massa an hour ago \| parent \| next [-]
		Like: To verify you are human, clik on the two ducks and install this new certificate. Bonus points if it's during a fake job interview.
	▲	ruszki an hour ago \| parent \| prev [-]
		Yes, however, this causes people who know what they do suffer because of people who don't. My question is whether this affects innovation, because the same thing at different places definitely does, and we actively fight against this exactly to help innovation.

tempfile 3 hours ago | parent | prev [-]

Which is better - two attack vectors that can be mitigated by an expert, or one attack vector that can't be mitigated by anyone?