Re: A small cloud with a golden lining

Ok, I agree that rogue CA's that are under a trustworthy PCA are a problem.
Having just written some re-signing code for certificate issuing I
has just realized that as a CA I could do this! It was late at night!

A different question is could PEM deployment survive the situation where
say a PCA or CA finds its key compromised and thus invalidating all the 
certificates issued under it!

Pete.