The identity management side that protects against outright website forgery is harder to police and largely hidden from end users and customers of the CA's If

The identity management side that protects against outright website forgery is harder to police and largely hidden from end users and customers of the CA's If it's hidden from end users, how the hell can it actually work? As a result, there is probably insufficient pressure on the CA's to pay attention to some of this stuff. All that matters is the one CA that pays the least attention, and I don't see how site owners have any control over that.