Comment by masfuerte

If users delegate their DNS to you, what's stopping you issuing a certificate to yourself for their site?