Fwd: [Cryptography] hard to trust all those root CAs