Moxie Marlinspike
• How to exploit BasicConstraints vulnerabilities • How to exploit SSL stripping • How to exploit null-prefix attacks on X.509 certificates