On the Perceived Value of EV Certs, Commercial CAs, Phishing and Let's Encrypt
I think the history and architecture lesson here is clear:   conflating privacy with trust&#x2F;identity was a huge mistake.<p>We could&#x27;ve had a mostly encrypted Internet a long time ago if encryption and privacy were not hitched to a commercial identity certificate with crappy maintenance tools.<p>I hope security architects going forward heed this lesson.