TLS has the benefit of a world-wide PKI built around it to attest to authentication. I was trying to note the risks to PKI-less / web of trust participants, an

TLS has the benefit of a world-wide PKI built around it to attest to authentication. I was trying to note the risks to PKI-less / web of trust participants, and should have called that out explicitly. Mostly because I'd much rather live in an encrypted world where WoT is the dominant mode, vs corporate-controlled PKI. And the biggest risks there seems like the step no one can get around in ordinary use.