Except how many people trust absolutely every single CA in the huge list that browser comes with. It only takes one of them (or even a single intermediate CA th

Except how many people trust absolutely every single CA in the huge list that browser comes with. It only takes one of them (or even a single intermediate CA that is listed by them) to sign a malicious key and the whole system is compromised. And it already happened few times (ex. http://en.wikipedia.org/wiki/DigiNotar#Issuance_of_fraudulent_certificates http://en.wikipedia.org/wiki/DigiNotar#Issuance_of_fraudulen...). Imagine what US government agency can do.