Tootfinder

@… @… That depends on how the poisoning worked — if they successfully poisoned the cache that an issuing CA uses, yes. Do CAs not run their own recursive resolvers, though?
TLS is just another layer in the swiss cheese model, though. It would…