With second thought this does not make sense. False certificates would be only problem in man-in-the-middle attacks of if the attacker can alter information in

With second thought this does not make sense. False certificates would be only problem in man-in-the-middle attacks of if the attacker can alter information in dns. In both cases the attacker could also fake the information about valid ca's.