Comment by fzeindl

So is the way to go forward that browser-vendors implement bruteforcing of private keys for a couple of seconds whenever the browser encounters a previously unseen certificate?