is WoT based SSL cert verification a silly idea?