Ian has done this specifically to highlight the problem in the current SSL cert model. Here is his post on why he does that: http://financialcryptography.com/m

Ian has done this specifically to highlight the problem in the current SSL cert model. Here is his post on why he does that: http://financialcryptography.com/mt/archives/001067.html http://financialcryptography.com/mt/archives/001067.html His site actually has a valid CACert certificate who do certification via web of trust. The only problem is that mainstream browsers have refused to support CACert. http://www.cacert.org/ http://www.cacert.org/