Robert Graham had a rebuttal, too, and he mentions how Let's Encrypt for instance is quite vulnerable to sophisticated attackers employing DNS spoofing attacks

Robert Graham had a rebuttal, too, and he mentions how Let's Encrypt for instance is quite vulnerable to sophisticated attackers employing DNS spoofing attacks against it: https://blog.erratasec.com/2018/04/no-ray-ozzie-hasnt-solved-crypto.html https://blog.erratasec.com/2018/04/no-ray-ozzie-hasnt-solved... Also, I think most would agree that CAs are quite terrible at security. It's part of the reason why everyone thinks the CA system sucks and is not trustworthy and it's also why Google has been pushing for Certificate Transparency to be able to verify if the CAs (or people hacking the CAs) are misbehaving. But it's still a patch on a broken system. And look what's been happening with Symantec, too, the largest CA. They were terrible at managing the infrastructure in a secure manner. There are thousands of different CAs. Most are probably insecure or hacked, we just haven't learned about it yet. Also, if you read Green's post, he mentions how this wouldn't be like the CA/software signing system at all. In those systems, you can revoke the certificate. If someone gets the master key for 500 million iPhones, those phones will either need to be bricked or they will remain vulnerable forever. If the NSA/FBI would learn that the system was compromised, they'd never tell us about it either, because they'd know people would then be pushing for the removal of the system, and they wouldn't want that after fighting for so long for something like it. I think Ozzie is being very irresponsible pushing for this. And the reason he is being this irresponsible is because he has a patent on it (Green links to it in the post), so he'd get royalty for billions and billions of phones for the next 20 years if implemented. That's really his main goal here. Ozzie wants all the credit and money for it, but I bet he's not going to take any liability for when the system is inevitably broken.