If you know about how TLS works, you know the system leans heavily on Certificate Authorities (CAs) to vouch for a server’s identity. That trust model works well most of the time, but it has a weak point: any CA in the hundreds trusted by your browser or operating system can issue a valid certificate…