Bogus SSL certificate for Windows Live could allow man-in-the-middle hacks
arstechnica.com