....use an untrusted SSL certificate....
Ah, that old chestnut. Define "untrusted", as your opinion will differ from everyone else's in some manner, especially if your name is Google.
You may not trust whoever issued it, but that doesn't mean that everyone doesn't and it certainly doesn't mean its necessarily more simple to fake.