Mark has posted a really good article explaining how much of a sham the certificate authority industry is. This is one case where I think IT in general just got tired of fighting the know-nothing know-it-alls in the marketing department.
So now we pay over $700 for the right to put a small grapic on our website linked to a few easily forgeable pages that is supposed to let our customers know we are a reputable company.
I'm suprised that Verisign spoofing hasn't turned into a sub-industry for organized cyber crime. They could sell Verisign Spoof Kits to phishers for, oh... say $700? (no checks or credit cards accepted, use Western Union).