Comment by cpburns2009

Why should podunk CAs be trusted by default to sign google.com when that's not their intended purpose?