diff --git a/qutebrowser/browser/network/networkmanager.py b/qutebrowser/browser/network/networkmanager.py
index 0eb7a5e4a..02d566fa9 100644
--- a/qutebrowser/browser/network/networkmanager.py
+++ b/qutebrowser/browser/network/networkmanager.py
@@ -209,7 +209,7 @@ class NetworkManager(QNetworkAccessManager):
             is_rejected = set(errors).issubset(
                 self._rejected_ssl_errors[host_tpl])
 
-        if ssl_strict or is_rejected:
+        if (ssl_strict and ssl_strict != 'ask') or is_rejected:
             return
         elif is_accepted:
             reply.ignoreSslErrors()