>There are not any significant costs to obtaining SSL certificates, so a new CA is hardly likely to change the SSL landscape at all. Well, it'll slightly incre

>There are not any significant costs to obtaining SSL certificates, so a new CA is hardly likely to change the SSL landscape at all. Well, it'll slightly increase the attack surface against the CA model, so there's the (probably very small) chance that something will go wrong and it will introduce a massive (temporary) hole in TLS, since CA-based trust has a "weakest-link" failure model.