Was that trusted root cert ever misused? IIRC, it was un-trusted because they did not do their due diligence on how an issued sub-cert was being used by an Egyptian company.<p>What does the GitHub DDOS have to do with MITM attacks on https?