Who checks those encryption keys? If you direct a CA's traffic through your server, you can answer the HTTP or DNS queries that prove domain ownership. And lot

Who checks those encryption keys? If you direct a CA's traffic through your server, you can answer the HTTP or DNS queries that prove domain ownership. And lots of people click past warnings because an IT disruption isn't a day off if they can work around it