Well, a self-signed certificate still offers that encryption. None of my arguments about X.509 / CAs are about government actors in particular, though. There a

Well, a self-signed certificate still offers that encryption. None of my arguments about X.509 / CAs are about government actors in particular, though. There are enough root CAs trusted by the major browser vendors that breaches can (and have) happened with minimal resource expenditure.