The CA's Role in Fighting Phishing and Malware

@danb35:
I agree that there should not be any prerequisites for using encryption. Sorry, I was a bit unclear.
What I really meant, is that “The power of hiding information is something everyone, except untrusted persons should get”.

Eg, everyone who has not shown distrust and abuse, should be granted the power of hiding information. Once they abuse this power, it should be revoked.
So “trusted” is everyone who is not “untrusted”, eg malicious.

I discussed this in a firewall forum (pfSense), and a really infected discussion came on where people said I was malicious because I provided a captive portal that forces the end user to install a root CA certificate in his terminal to be able to use the internet, so the traffic could be scanned for viruses by a antivirus MITM proxy.

Privacy is a fundamental right, but the problem is these “digital bombs” (eg viruses, malware) that auto-install themselves into computers, without having to click on anything. You just simply visit a website with Microsoft Edge - BAM and the whole computer is full of rubbish and strange weirdware.

If real mailbombs were as common as digital bombs, I think people would think its resonable that the post office opens all letters and scan them, and everyone who shown distrust by attempting to send a bomb, would only to get send openly in postcards.

Thats why I think its EVERYONE’s duty to fight malware and phishing, CA’s, OS vendors, Browser vendors, network admins, hotspot owners, hosting provider’s, ISPs, governments, antivirus vendors, and much more. If everyone could just help along to fight malware, we could collective set stop for it.