The Spy in the Middle: Are SSL certificates even more broken than we thought?
The Spy in the Middle: Are SSL certificates even more broken than we thought?: "Crypto.com: 'A decade ago, I observed that commercial certificate authorities protect you from anyone from whom they are unwilling to take money. That turns out to be wrong; they don't even do that.'"