I agree that the "first introduction" is an issue, but the use of Perspectives and key signing seems to be a fairly strong attempt to overcome that. A stronger

I agree that the "first introduction" is an issue, but the use of Perspectives and key signing seems to be a fairly strong attempt to overcome that. A stronger disagreement: after the presentation puts so much time into linking the structure of PKI and the social incentives that mess it up, to just handwave that away as "a misconfiguration of SSL caused by a political quandary" is kind of missing the point. Any system designed with security in mind must take into account the human factor from the start; human behavior cannot be changed independently of the system's structure.