So, how close are we to having to compile our own browsers to ensure we can still use valid certificates? And which CAs will be trustworthy after this?