"The current CA PKI system is pure madness. Everyone in the CA club can issue certificates for anything" It boggles the mind that all these security experts (i

"The current CA PKI system is pure madness. Everyone in the CA club can issue certificates for anything" It boggles the mind that all these security experts (including those frequenting these forums) take such pains over obscure, hard to exploit things (like about half the CVE vulns), and come down with the fury of a thousand suns on anyone daring to come up with, say a new secure messaging protocols without their permission (remember the Telegram brouhaha) and yet blithely go on endorsing and even encouraging this totally broken third party trust system, this house of cards that the entire web security framework is built on. Just baffling.