adding info about the requirement for HTTPS to use a certificate signed ...

...by a CA that is trusted on consumer machines.