Yes, the notification mode would probably often be sufficient in many cases (and I think might be what caught the DigiNotar compromise?). I forgot what happens

Yes, the notification mode would probably often be sufficient in many cases (and I think might be what caught the DigiNotar compromise?). I forgot what happens if an attacker tries to block the notification from going through, though.