> even ones it has no right signing
They have that right though? There is no monopoly to single CAs for a given domain.
Why should podunk CAs be trusted by default to sign google.com when that's not their intended purpose?
alt Hacker News
Why should podunk CAs be trusted by default to sign google.com when that's not their intended purpose?