This over-shot may have the opposite effect though. I think the browser vendors will have more trouble limiting plugins that monitor certificates and perhaps bu

This over-shot may have the opposite effect though. I think the browser vendors will have more trouble limiting plugins that monitor certificates and perhaps build a p2p transparency report of sorts. Right now the default CA's include the federal post offices, etc, of all sorts of seedy countries.