Josh and Kurt talk about modern TLS certificate trust