Iran gamed the CA system (DigiNotar?) to spy on their citizen&#x27;s https traffic.<p><a href="http:&#x2F;&#x2F;www.theregister.co.uk&#x2F;2011&#x2F;09&#x2F;06&#x2F;diginotar_audit_damning_fail&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.theregister.co.uk&#x2F;2011&#x2F;09&#x2F;06&#x2F;diginotar_audit_damn...</a><p>So it&#x27;s OK to be paranoid, IMO. The CA system is radically flawed in that it can be gamed by state actors.