Agreed. I want encryption not verified-identity from SSL. Self-signed certs provide encryption - browser makers didn't let that happen and created a $$$ monopol

Agreed. I want encryption not verified-identity from SSL. Self-signed certs provide encryption - browser makers didn't let that happen and created a $$$ monopoly in CAs. It wasnt until the CA list became so obviuously broken ('approved' CAs issuing bogus google.com certs for example) that letsencrypt became conceivable. I'll use the cert-ID and my own mechanism to validate the cert-ID, like a name system. a Distributed name system even.