It used to be the case that when I visit a website whose certificate doesn't match its domain name, I get a confirmation dialog. Now I just get an error: An error occurred during a connection to www.earendil.ath.cx:443 because it uses an invalid security certificate. The certificate is not valid for domain name www.earendil.ath.cx. (ssl_error_bad_cert_domain) But that's not the default behavior I want at all. I don't even get a link to some pref for changing this behavior.