Why your certificate authority rarely matters | Hacker News Reader