"Unlike web SSL servers there is no need to send a certificate back to the owner. LF is a global shared data store and therefore makes use of itself to publish

"Unlike web SSL servers there is no need to send a certificate back to the owner. LF is a global shared data store and therefore makes use of itself to publish certificates." Nice! Thinking a bit about this - this sounds like it has real potential vis-a-vis traditional CA. With a (many) globally trusted db - it sounds quite feasible for eg Mozilla or Debian to simply store (or "bless"/trust) any number of root certs - and record that in lf. And the same could be done for signing binaries (whether via x509 or some other scheme - "all" that is needed is some way to "discover" trust of the signing key after all - be that a gnupg key or a x509 cert etc).