

Allowing a certificate without proper validation for local only networks is a terrible, terrible idea. I could super easily use this as a loophole to set up a honeypot public free wi-fi, redirect all traffic through a reverse proxy and man-in-the-middle every single HTTPS connection, effectively allowing me to harvest everyone’s passwords in a really quick and easy way.
Just use DNS verification. It’s not that hard.








EMDR absolutely can be used by professionals, but where I live, it is used exclusively and very rushed. You are given a pre-allocated block of, say, six sessions, where you are expected to pretty much immediately get into the traumatic memories from the first session, and if you are resistant, you’re told that you are wasting time.
That’s why I hate EMDR, because it is held up as the “evidence-backed” method and thus professionals are functionally forced into rushing it, because the insurance provider won’t pay for the likely months or years of therapy it takes to do therapy in a safe and healthy way.
Again, just from my own personal experience and that of my friends who have been through it.