Thank you for the explanation. I do a very limited version of this simply by eyeballing the certificate chain when connecting to the limited set of sites where

Thank you for the explanation. I do a very limited version of this simply by eyeballing the certificate chain when connecting to the limited set of sites where I really care about security. I've long wondered at the dearth of client side tracking tools/functionality for this. Then again... I'm glad it's being addressed in a fashion to and by people who have a chance of making it stick.