But herein lies the heart of the problem, because the entire web security architecture rests upon the integrity of the embedded SSL certificate authority (CA) system.

FORBES: Cryptocat Increases Security In Move Away From JavaScript Web Delivery

Encourage and develop better authentication systems, including PKI (public key infrastructure) and CA (certificate authority) schemes.

CNN: Global panel issues Internet security recommendations