@ryanc The problem is this entire exchange highlights what's wrong with PKI: Entrust demonstrates they are focused on functional, practical security that is stable enough for people to rely on. Google is looking for excuses to break everything on brown M&Ms. I know which company I think understands how to make security that actually works, and it's not the one bullying Entrust. (When Mozilla addresses their HSTS problem, they'll be worth talking about.)