But herein lies the heart of the problem, because the entire web security architecture rests upon the integrity of the embedded SSL certificate authority (CA) system.

FORBES: Cryptocat Increases Security In Move Away From JavaScript Web Delivery