@pkimpton sure. Since letsEncrypt anyone can have trusted certificates for free. But https never said a website would be "safe". It just says this site belobgs to the certificate. But malicious men did not want to buy a certificate. Now they can make their own... Yea