I've two minds about the proposed change. On one hand, anything that can make it more difficult for governments to engage in dragnet surveillance is a public go

I've two minds about the proposed change. On one hand, anything that can make it more difficult for governments to engage in dragnet surveillance is a public good. Though, I have reservations that the CA model is not what should be endorsed here. At the risk of regurgitating the same arguments that come up every time with https, I'd much prefer the separation of encryption and authentication in the way browsers echo security back to the user. When logging into a site, I want authentication, when I'm browsing as a guest, encryption alone is fine. The way browsers have thrown self-signed certificates under the bus has only helped to enable state surveillance at its current scale.