DNS. I don't know exactly what I'd change, but I'd look for a way to make it impractical for the whole domain/certificate "industry" to get where it is today.

DNS. I don't know exactly what I'd change, but I'd look for a way to make it impractical for the whole domain/certificate "industry" to get where it is today. ICANN, Verisign, Network Solutions and the like are all just scams.