Peer review and regular key rolling should be built into the system. It should not be based on "root" certificates rather something more like blockchain for ge

Peer review and regular key rolling should be built into the system. It should not be based on "root" certificates rather something more like blockchain for generating security keys and each roll /session generates a new key. IANAEE but if building a currency is possible without it being possible to create fake money then it should be possible to protect websites in a similarly decentralised way.