And this isn't even the first blog post to mention the fact that a CA gave out a cert to unauthorized person...

Mike Zusman tested a group of CA issuers and received a cert for Microsoft's live.com and talked about it at Blackhat this year: http://schmoil.blogspot.com/2008/08/domain-validated-ssl-cer...

Additional information at: http://www.law.com/jsp/legaltechnology/pubArticleLT.jsp?id=1...