A very interesting paper on hidden root CA's and larger issues with the Web PKI model

Rusted Anchors: A National Client-Side View of Hidden Root CAs in the Web PKI Ecosystem

6 Likes