Based on the information that's in there, this makes mutual authentication based on TLS certifictes (or some other public-key-scheme) mandatory, and uses it for

Based on the information that's in there, this makes mutual authentication based on TLS certifictes (or some other public-key-scheme) mandatory, and uses it for addressing. The only information that this talk contains about how to solve the introducton,authentication problem is this (paraphrasing): "I don't trust Verisign to prove someone's identity, but I trust google's search results" (As in "I googled for ACME Bank, and this is the address/public key that was returned, I am going to trust it") The whole thing feels like something someone would come up in an afternoon with lot's of handwaving potential problems away.