[antihero]

"Does that not imply they have found a weakness in TLS/SSL?"

Would it not be simpler to get access to a root CA?