It doesn't matter which CA one is using as long as there is a CA that's freely available to anyone. The article makes very questionable suggestions such as this

It doesn't matter which CA one is using as long as there is a CA that's freely available to anyone. The article makes very questionable suggestions such as this: > For decades, users of SSH have had a system (save the certificate permanently the first time you connect, and warn if it ever changes) that is optimal in a sense: it works at least as well as any other solution. It's trivial to implement, is completely free, involves no third parties, and lasts forever. To the surprise of absolutely no one, web browsers don't support it. I would interpret this as the author arguing against the entire CA system.