1.1. What risks did fraudulent digital certificates pose for Microsoft, VeriSign and general consumers?
2. Who are liable for the losses caused by fraudulent certificates/signatures? What legal remedies are available to innocent defrauded parties in electronic transactions?
3. How could Microsoft and general subscribers protect themselves against the potential threat posed by fraudulent digital certificates/signatures?
4. What action should CAs take to guard against security threats?
5. How could legislators regulate the conduct of CAs, digital certificate subscribers and relying parties?