It probably won't happen, but I'd love to see the concept of channel binding reach the web ecosystem. It allows you to securely verify the certificate, independ

It probably won't happen, but I'd love to see the concept of channel binding reach the web ecosystem. It allows you to securely verify the certificate, independent of any third party. However it only works when you and the server have a shared secret (which could be a password or something else). It therefore isn't really applicable to casual "anonymous" browsing. But for that kind of browsing, a third-party attestation (e.g. from a CA) is probably good enough anyway. We use channel binding in the XMPP ecosystem and it's going well.