I don't understand the https security model attempted upon me by The OpenBSD Journal (undeadly.org).
Instead of using self-signed certificates for https like they did in the past, they for a while have had 6-month certificates signed by Root CA, which they do appear to change at least somewhat promptly. I guess that cacert.org has some kind of a 6-month limit on certificates?
As an undeadly.org user, am I supposed to blindly accept a new cert every 6 months?
Import CA Cert Signing Authority Root CA from http://www.cacert.org into my browser?
Ask the admins to go self-signed route instead, making a cert for maybe 2 to 10 years, which I'd only have to accept once?
P.S. It looks like cacert.org used to be included in OpenBSD's cert.pem and ports/security/nss at one point, but was henceforth removed on 2014/04/09 and 2014/04/29, respectively, following a redistribution licence incompatibility review.