@kylerankin Applied to CAs, this means if a CA violates your trust, you should be able to revoke your trust in them but still be able to browse the web securely. And if you don't trust, say, Verisign's CA, you can anchor your trust in another vendor and web browsing is secure.