You can't trust anybody
I've said it before and it looks like I'll keep on saying it.
Why is a Chinese CA capable of handing out a base certificate for Github and a University in Florida? That's a genuine puzzled question because I don't know how certificate issuance is organised and managed.
Biting the hand that feeds IT
