Re: Yeah, this is crazy but....
do 99% of users even know the slightest about what this means? i doubt it.
that was supposed to be the how point of 'trusted issuers', that you did not need to worry as they were supposed to be 'trusted' to a) do the background checks to make sure the person who asked for a cert was really the person who 'owned' the site (failed that years ago) and b) would not (be able to) use that certificate on their own to compromise a users or businesses communications (now failed)
talk ab out the fox guarding the hen house, and in this case it is two foxes already proven to be perilously close to the ethical and legal line
time to start removing their certs from the trusted issuers on my personal systems
Biting the hand that feeds IT
