Using just a laptop, boffins sniff, spoof and pry – without busting browser padlock

Researchers break certificate authorities' domain validation

Researchers based in Germany have discovered how to spoof certificates they don't own - even if the certs are protected by the PKI-based domain validation."