CAs will continue to be broken into, or be pressured by governments. If the trust model doesn't change, nothing else will matter. The best suggestion I've see

CAs will continue to be broken into, or be pressured by governments. If the trust model doesn't change, nothing else will matter. The best suggestion I've seen is to allow certs to be signed by multiple CAs (currently the X.509 certificate format doesn't allow this). Subverting multiple certificate authorities is much harder. (This will also need browser checks to ensure they're from truly different organizations, rather than just different names, or even from different countries for the paranoid.) It also gives software vendors a nice way to show which CAs they trust -- rather than including the list of keys with their software, instead they can sign the CAs certifying keys, and revoke when they are no longer trusted.