The registry/registrar system may not be perfect, but that's what we have (and there is an appeals process). It's not as bad as you make it seem. You can not re

The registry/registrar system may not be perfect, but that's what we have (and there is an appeals process). It's not as bad as you make it seem. You can not redelegate google.com for example, even if you work at a registrar. Whereas any CA could generate a new certificate, today. As long as domains are what you generate certificates for you might as well assert that delegation in a cryptographically secure way. It may also be a good basis to make domain transfers more secure.