I can see how https is technically better than http. But wouldn't a https-only web put too much trust in companies who create certificates? I can't think of a c

I can see how https is technically better than http. But wouldn't a https-only web put too much trust in companies who create certificates? I can't think of a concrete danger but it sounds dangerous that the degree of security depends on monetary interests.