A hacking attack exposes deeper flaws in the internet’s security infrastructure

I think the article is correct that this is more a social problem than a technical one. If we exchanged public PGP certificates directly, there would be no concern with central Certificate Authorities (CAs) being cracked, but it's a lot of work to collect trusted public certificates for every person and web site you want to work with.

In the meantime, until we come up with a better social model for decentralized certificate exchange, perhaps the big, centralized CAs need to be subject to independent security audits (like banks or publicly-traded companies are subject to independent financial audits), and those who fail the audits are dropped from the major browsers. That is a strong incentive for them to clean up their acts.

I have honestly never payed much attention to whether a site is either
"http" or "https", given that I have never participated in detailed online websites. I think that the amount of individuals capable of hacking, and the ability to gain quick knowledge on how to hack nearly anything you want has warranted a need for more 'internet' security and task force.

here is the pastebin post from comodohacker http://pastebin.com/1AxH30em