So you don't trust them to not issue an unexpected cert but you do trust them to always log it? edit: I just read the spec. the cert needs to be logged to be c

So you don't trust them to not issue an unexpected cert but you do trust them to always log it? edit: I just read the spec. the cert needs to be logged to be considered valid by the browser. which has fun connotations where google is effectively monitoring everything you access. basically the mother of all analytics. well... I mean... that is.. if they were not already monitoring everything you do on the web. so it's ok I guess.