> so, problem 1, the USG already owns CAs and doesn't need supercomputers to get valid certificates

I'm sure it's gotten a lot tougher out there for this kind of thing since the Comodo and DigiNotar attacks. Looking forward to more mandatory CT mechanisms!