Alan Francis on Nostr: Its pretty bad. It means anyone could theoretically sit in the middle of a TLS ...

Its pretty bad. It means anyone could theoretically sit in the middle of a TLS connection and intercept traffic by pretending to be "the other end". The certificates form a chain of trust from one to the other and one somewhere in the middle can now be faked. Most big name vendors will roll out fixes that, essentially, stop your browser from trusting that potentially bad one, but these certs could to be embedded in random things like, say, your doorbell or TV.