> Until someone can go and start their own CA in that 10 minutes that works across the world, we're moving away from and not towards what HTTP was. Would you

> Until someone can go and start their own CA in that 10 minutes that works across the world, we're moving away from and not towards what HTTP was. Would you trust the authenticity of content that originated from a site signed with such a CA? If so, why? PKI is just a technology for verifying trust over untrusted channels. But that trust is created in and remains rooted in the real world, and is itself built on societal chains of trust. No technology, centralized or decentralized, will replace real world trust in human societies any time soon. Trustless tech only works if it's based on a society with trust. Otherwise the tech is meaningless.