> That's only as secure as the weakest CA in their trust store though, right? You are absolutely right. Not only the weakest CA but now you needlessly involve

> That's only as secure as the weakest CA in their trust store though, right? You are absolutely right. Not only the weakest CA but now you needlessly involve a lot of third (or at least one third party). It is not something I like but some of our partners demand it.