Why bother with this at all? The weakest link is still the CAs. Corrupt one of those and you've got "root" on most of the Internet. E.g. the very first certifi

Why bother with this at all? The weakest link is still the CAs. Corrupt one of those and you've got "root" on most of the Internet. E.g. the very first certificate my browser trusts is: TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı Huh? WTF? Why should I trust a CA owned by the "Turkish Military Force Solidarity Foundation"? [1] [1] http://en.wikipedia.org/wiki/Digital_signatures_and_law#Turkey http://en.wikipedia.org/wiki/Digital_signatures_and_law#Turk...