> If crypto systems relied on trusting that everyone does the right thing, they would be useless. Acutally, in-brower SSL crypto without certificate verificati

> If crypto systems relied on trusting that everyone does the right thing, they would be useless. Acutally, in-brower SSL crypto without certificate verification (as in "is this the same certificate that it was before?", not as in "is this certificate signed by trusted CA?") relies exactly on that assumption.