> with the proviso that you’re trusting the CA cabal to not let someone else spoof you And keep in mind that usually, the user has ultimate control over the "C

> with the proviso that you’re trusting the CA cabal to not let someone else spoof you And keep in mind that usually, the user has ultimate control over the "CA cabal". Since the user is the antagonist in the world of DRM, relying only on HTTPS might not be the best idea. But then again, the whole effort of preventing the user from doing what they want on hardware and an OS they have total control over might not be the best idea in general.