Unauthorized digital certificates could allow spoofing