> If your DNS is compromised SSL and x509 is currently what's protecting your users from a fraudulent site. Uhm no? Because you can litterally just buy a new v

> If your DNS is compromised SSL and x509 is currently what's protecting your users from a fraudulent site. Uhm no? Because you can litterally just buy a new valid cert for it? As long as we're talking Domain Validated. I doubt your average user will notice that there isn't a green bar anymore or that the certificate lacks ownership information.