Replying to a message from: James

Guys you know we work as a team on this

Whilst true in its own right, simple wire sniffing can retrieve this information on the LAN side compromising the admin login. It's not always the external users you have to worry about. Internal malware can also compromise live wire data. Certificate errors are the responsibility of the internal admins to get right if they are going to use this facility.  If anything certificate redirect errors provide admins with a sign that there is a problem with their config.

Would it not be a better option to provide users an option to deal with this on a case by case basis..?

Could you not just provide me a switch I can add to the config files to apply this setting until you internally decide if you wish to implement this crucial option?

Regards, James