In a parallel world browsers and service providers alike are using DANE and you wouldn't have even known if a random CA was compromised or not.

#ca #pki #x509 #dnssec #dane