Unsigned HTTPS cert is a bad idea