CA ecosystem
"It has set itself the tough task of fixing both the SSL and Certificate Authority (CA) ecosystems."
It certainly does - I thought it was blindingly clear to everyone by now that the "CA ecosystem" simply does not work. The fundamental basis of it is too easy to get wrong and/or break.