> Here's a fun one I noticed: Wells Fargo and several other banks are CA's. This is idiotic. The "logic" behind PKI dictates that it's a third party identifying

> Here's a fun one I noticed: Wells Fargo and several other banks are CA's. This is idiotic. The "logic" behind PKI dictates that it's a third party identifying my bank to me. If banks themselves are CA even that fig leaf doesn't mean much. How is that idiotic? Go to any CA's site and their cert will be (essentially) self-signed. There is no requirement that it's a third party signing the cert, just that it's a 'trusted' party.