Yet another reason why SSL is broken. Its not the encryption, its the centralized trust framework of X.509.

Man-in-the-Middle Attacks Against SSL - Schneier on Security