96
what if the hacker provided the public key for https connection?
(www.youtube.com)
This is a most excellent place for technology news and articles.
Firefox, Chrome, Edge, will all warn you about self-signed certs or cert mismatches but allow you to continue. You're completely correct that SSL/TLS needs a certificate, but it doesn't need to be CA issued or in any way legitimate for the encrypted tunnel to be established