Completely agreed - the current system of CAs is designed to blunt phishing attacks and secure cc transactions over the wire and it mostly succeeds at that.<p>Where it fails is as a protection against state sponsored scrutiny or a serious direct hacking attempt.