On: The Illustrated QUIC Connection

[3np]

You can generate your own root cert and self-sign. No need for third-parties.

[martinflack → 3np]

I found minica very useful to do something like this (no affiliation): https://github.com/jsha/minica

[superkuh → 3np]

Do mainline browsers (chrome/firefox/safari) accept this? Do they do it without scaremongering warning the prevent access like with normal TLS and self-signing?

[martinflack → superkuh]

You import your "CA cert" into the browser or the underlying operating system, and then the browser accepts the certs signed by it.