Comment by collsni

I liked the CA MITM call out.. we just trust these organizations to not deploy wildcard malicious certificates.

Kinda messed up devices come preloaded with unchangeable trusted CAs

Guy knows his stuff, also works for dod.