Security and privacy experts have been warning about the fundamental flaws in the certificate authority system for more than 15 years now, but for the most part those warnings have gone unheeded. The system is set up so that any CA has the ability to issue a certificate for any site on the Web, and users have virtually no visibility into the process and no sense of which CAs are trustworthy. Download this Spotlight to learn more about certificate authority compromises.
