I'd say it's not the CA model itself that's broken; it's the way we use these CAs that is too static to account for inevitable breaches in security. There is n

I'd say it's not the CA model itself that's broken; it's the way we use these CAs that is too static to account for inevitable breaches in security. There is no easy way to add or remove a CA from our trusted sets. There is no way for a server to send multiple signatures to the client, so the client can choose any CA he actually trusts and silently discard the bad CAs. There is no problem in having any CA issue a certificate for any domain; the problem is that we have to trust these CAs and we can't move fast enough.