> Mitigations include browsers firing CAs and severely impacting their business (so effectively, there is regulation) Nit: Not when the browser developer and C

> Mitigations include browsers firing CAs and severely impacting their business (so effectively, there is regulation) Nit: Not when the browser developer and CA are part of one entity. Excepting some major change to corporate structure, there are presumably no or very nearly no circumstances under which Chrome will permanently remove the Google CAs. Their behavior is therefore essentially unregulated WRT Chrome users.