Hacker News Reader

Would be nice to have an option to disable this for intranets. Otherwise - a very good thing to do.

Couldn't you just set up a Private CA since you'd have to customize things anyways?

Exactly. You should never consider a network perfectly secure, no matter if it is the internet or your intranet.