3 ms·

Keys can be exchanged without root authority. Root authority is only required for identifying that website owner is who he claims to be.

• xyzzyz 5y ago
  Yes, and without verifying that the owner is who he claims to be, exchanging keys is not of much value.
  • c22 5y ago
    I dunno, knowing the owner hasn't changed since last time seems almost as good.