I'm torn. Should everyone and his mom be allowed to create certificates? No. Should we limit ourselves to 'the big players' in the US? No. That would drastica

I'm torn. Should everyone and his mom be allowed to create certificates? No. Should we limit ourselves to 'the big players' in the US? No. That would drastically reduce the competition and make certificates far more expensive again. One could claim that quality has it's price, cheap competition probably cuts costs in the process, yadda yadda. I don't buy it. Give me a list of 20-30 CAs over 3 every day. I don't care about the number that much. What I would like to see is - a site where I can get information on the usage, origin and track record of CAs - a site where I can see where a a CA is based. A lot of people are already removing CAs from China. Different places of the world have different trust values already (and, frankly, the US is not high on my list of 'trusted' places. I very much know that we're discussing a big failure of a dutch CA here, but I'd usually prefer to trust a CA from the EU or Switzerland instead of an US one).