Fraudulent certificates in the wild — again

SSL certs are based on the principle of being signed by a trustworthy 3rd party. It's pretty reasonable that if a CA turns out not to be a trustworthy party (whether due to corruption or incompetence) that they be blacklisted.

This should act as incentive to purchasers of certificates to make some sort of effort to assess whether there supplier is in fact trustworthy. Something that is sorely needed; the nature of SSL in browsers (excepting separate classes of certificate such as EV certs) is such that you as a site owner have almost no incentive to use a trustworthy CA since any attacker can use a dodgy CA and it will work just as well in the users browser.