Been reading more about the https trust situation, and it seems inevitable that ugly problems fundamental to that model will emerge. Its quiet now, but more people are noticing you cant "properly" profit on the public web2 internet without Verisign, Microsoft, or other "trusted" centralized authorities. You can't sign an executable you wish to sell or make a trusted internet accessible service.
If you don't want to use them, the most promoted provider of "free" certificates is Lets Encrypt. Their parent org is another insiders club funded by big tech and governments. Their rearch seems to be how to put more "privacy preserving" trackers into firefox.
Some of the folks who work there seem ok, but the problem is the structure. How are they going to avoid being captured?
