StartEncrypt considered harmful today
SSL/info sec/whatever noob here. Why <i>can</i> they produce certificates for, say, google.com without the permission of Google? Or am I reading the article wrong?