Welcome to the world of certificate authorities, where the dumbest decision maker means the whole system is a joke. If you're a government authority or even ju

Welcome to the world of certificate authorities, where the dumbest decision maker means the whole system is a joke. If you're a government authority or even just a individual looking to get a nice signed certificate for some big domains you need look no further than that giant CA list. Any one of thousands. It's damn hard to have one developer write something reasonably secure, how hard do you think it is to have thousands write everything perfect?