it’s not to verify that a site is trustworthy or whatever. it’s to make sure what you’re seeing is genuinely from the other party and not a man in the middle. doesn’t matter that any pajeet can get one for free.
Name:
Anonymous2018-12-12 4:50
>>6 There is this curious phenomenon when normal people are expected to live on autopilot(NPC?) and not notice any details, like living in a movie and everyone who pays attention to detail is labeled a nerd, autist or having OCD.
Name:
Anonymous2018-12-12 7:36
nowadays, https in the browser means that (unless you install additional certs) the domain your're are connecting to is actually that domain and not something that was rebinded by a malicious DNS (or a virus, but I guess if a virus can rebind your're are DNS then it can also install a cert). it also protects from passive (sniffing) and active (malicious modification - e.g. modifying a program your're are downloading on the fly).
guarantees for applications can be better than that because certificate pinning means that you can automatically verify not only the fact that the domain is trusted but also that it was verified by one specific authority, so you avoid the problems that come with things like typosquatting and homograph attacks