SSL certificates and MD5 collisions

Beyond the profit motive, privacy concerns and scalability issues prevent CAs from really verifying identities usefully. In order for them to give useful verification, they'd have to not issue certificates to anyone other than my bank and credit card company; otherwise, there's the risk that some other entity will have a confusing site that makes me think that it's my bank when it is actually something else. Since the CA doesn't know what bank I use, and since it wants to be useful to customers of other banks, this is impossible.