A message from Comodo Hacker – Pastebin.com
[also see LWN's write-up https://lwn.net/Articles/435214/ .] Curios message [allegedly] from a person who hacked into Comodo CA. Makes you wonder ... Basically the whole SSL trust is just a piece of crap and cannot be trusted at all -- major CA have thousands of reseller accounts protected only by username/password combination and *ANY* such account could be used to sign *ANY* certificate, i.e. amazom.com, yourbank.com, etc.