you'd only have to crack the weakest cert of the chain (or well, of any chain actually, the CA system being what it is..) Right... so I don't think anyone's go

you'd only have to crack the weakest cert of the chain (or well, of any chain actually, the CA system being what it is..) Right... so I don't think anyone's going to bother trying to crack a 2048-bit cipher either when it's much easier to just bribe/blackmail/torture a single employee of one of the hundreds of organizations in ca-certificates.