I wish Cloudflare or Google would get into the CA game; they'd be more than capable of doing OCSP checks on every use, and could issue very short lived certificates otherwise (weekly?)
http://www.certificate-transparency.org/
As most of these Google initiatives go, this is open source, and they're encouraging other entities to adopt the technology.