But thats my point, I trust PHP in the same way that I trust the apple cert process. For the most part implicitly and by reputation.