This is completely optional for the Web server, of course, but some companies, including the Associated Press, are pledging to honor the requests.There is also some debate over how the browser should handle misconfigured or invalid certificates used for SSL encryption.