Great odds, but doesn't that provide an attacker with a way to break the system? With enough notaries giving false warnings on purpose, a random pick of 5 will very oftet tell you not to trust a site regardless of its actual status. Or am I missing a way to eliminate the problem of false positives here (disregarding normal certificate updates).