On: Why HTTPS for Everything?

[Senji]

Ask the user for the time.

[Aldo_MX → Senji]

  > What time is it?
  Jan 2nd, 2017
  > Sorry, your certificate is expired. Access Denied.
  Wait, I wrote the wrong date, it's Jan 2nd, 2016
  > Ok. Authorized

[tscs37 → Aldo_MX]

I mean, it kinda sounds and looks silly, but if you want to bootstrap security, it should do.

Atleast I can't think of a better way to get time from a server with a cert.