Yea, if someone at a nation state level manage to fake a cert and redirect BGP, I&#x27;m sure they could affect a huge number of systems pretty quickly. Do git clients even do a good job of SSL verification?