This talk will provide an in-depth examination of the current problems with authenticity in SSL, discuss some of the recent high-profile SSL infrastructure attacks in detail, and cover some potential strategies for the future. It will conclude with a software release that aims to definitively fix the disintegrating trust relationships at the core of this fundamental protocol.

I like the way this design uses blind proxies to protect user privacy. I wish DNS worked that way.

BlackHat USA 2011: SSL And The Future Of Authenticity - YouTube