The last paragraphs warning about using a free certificate authority (CA) are wrong. Until certificate pinning is supported and used, any CA can issue a certificate for any site, whether it already uses a free CA or not.

Oh, BTW: Both the US and Chinese governments are already CAs, so they don’t have to go though a 3rd party CA to issue fake certificates.