> When Google's CAs start issuing certs to non-Google parties, we can revisit the 'eggs-in-basket' question. I'm not really seeing the problem there, either. U

> When Google's CAs start issuing certs to non-Google parties, we can revisit the 'eggs-in-basket' question. I'm not really seeing the problem there, either. Unless we trust Google to do this less than we trust every other root CA. All evidence I've seen points to Google caring very much about internet security.