> Suppose you wanted to steal credit cards. The best place to do your MITM would be at the payment processor's connection to the net. In that situation the att

> Suppose you wanted to steal credit cards. The best place to do your MITM would be at the payment processor's connection to the net. In that situation the attacker can pass DV checks as the server and so can get new certificates issued to themselves. Or maybe they stock up on certificates before attacking and use OCSP stapling to run out 7 days per certificate. Basically, everything falls apart in that situation already.