[raverbashing]

> Recognition of QWACs implies that browsers shouldn't question the origin, integrity or data in the certificate.

Apart from checking the certificate chain and revocation lists, isn't that what browsers do?