On: Introducing .app, a more secure home for apps on t...

[michaelt]

Finally, "there are several dozen CAs and some are really sketchy" becomes a strength, rather than a weakness!

[CydeWeys → michaelt]

Sketchy CAs that issue certificates to people that don't actually own the domains in question tend to get nuked from the chain of trust very quickly.

[toomuchtodo → CydeWeys]

Historically, I'd disagree with you, although it is improving with Certificate Transparency monitoring and alerting.

[CydeWeys → toomuchtodo]

Fair enough, but it's getting better, especially thanks to CT as you point out.