You’re not alone.

Correct me if I’m wrong, but isn’t the CA only signing your public key to prove identity/authority? I don’t think the CA can magically MITM every cert they sign.

The impact is not serious enough to warrant a $1m entry fee, IMO. At best, someone could impersonate a site. They’d also have to get other things in line (e.g. DNS hijacking) to be at all successful anyway. And it’s not like most people are authenticating certs themselves. They just trust browsers to trust CAs that vouch for you and prevents those scary browser warnings.

It doesn’t improve encryption compared to a self-signed cert though.

They came up with the ACME protocol, so presumably somebody could. The real barrier to entry is the cost of getting into that certificate chain of trust. I have no idea why it’s so difficult and expensive.

Remember they wanted like $75 for certs? The gall.

I’d at least be fairly confident Vance wouldn’t seriously suggest nuking a hurricane.

At least that mf would be predictable.

What crackdown? The SEC has only charged actual scammers and they’ve “requested information” from the legitimate players to figure out how to proceed. Other than some bad calls by sanctioning software, there’s hardly been anything considered a “crackdown.”

I love this kind of shit. Building things for the sake of it is worth it. Not only as just expression, which may be hubris but it’s still expression. Also entertainment, inspiration, pushing the art of engineering, and just giving people something to do, and all the good that comes with that like personal and trade growth.

A purely utilitarian life is a life only spent on survival. Not a life I want to live.