Comment by GavinMcG

Is there a guide out there for how browser users can protect themselves from untrustworthy CAs?