Comment by gquere

Certificate Transparency solves the rogue CA scenario for domain owners.