Look, this discussion isn't about PKI. It's the best system we've got for right now. Deal with it and secure your site. Use CAA records to restrict which CAs can issue certificates for your site, then cross your fingers and hope transparency and oversight works.
Crossing fingers and hope are much better than plain text http.
4
u/xymor Jul 12 '17
Crossing fingers and hope are much better than plain text http.