Researchers have created a TLS extension that can detect fake SSL-certificates http://ping.fm/egzpb