SSL rules remain the same, and SPDY runs over SSL.

My opinion - get a real signed cert. A basic free one from startssl.com is available.

The PKI has problems to be sure and needs to evolve. But simple forms of eavesdropping and MITM attacks need to stop. Its great that SPDY is SSL based.