On the Perceived Value of EV Certs, Commercial CAs, Phishing and Let's Encrypt
I think the history and architecture lesson here is clear:   conflating privacy with trust/identity was a huge mistake.We could've had a mostly encrypted Internet a long time ago if encryption and privacy were not hitched to a commercial identity certificate with crappy maintenance tools.I hope security architects going forward heed this lesson.