> In odd news, the US government has to pay private companies for certificates. You'd think they'd be able to get browser makers to allow a root certificate that can only verify ".gov" addresses and do some certificate pinning. They pay private companies for airplanes, too. So?