[tbb-dev] A Proposal for Double-Checking self-signed certificates