You identify a real problem, but I'm not sold on your solution. There are lots of British companies on .com; on the other hand, do you really believe the US gov

You identify a real problem, but I'm not sold on your solution. There are lots of British companies on .com; on the other hand, do you really believe the US government wouldn't be able to get certificates for .uk (or, for that matter, .ir)? If nothing else, consider http://www.win.tue.nl/hashclash/rogue-ca/ http://www.win.tue.nl/hashclash/rogue-ca/ (a rogue CA, based on MD5 collisions) and the declining security of SHA-1... Also, you have to be pretty good at security before using rogue CAs becomes worthwhile. Most hosts are not very secure (even if you're not using Flash/Adobe Reader, are you sure your browser has no issues?) and people carry convenient location and listening devices, commonly known as "mobile phones", with them.