Comment by darpa_escapee

Also, assume that states have access to root certificates.