Oh sure. I've written software that does exactly that. I also tend to write my stuff to use TOFU when it's TLS outside of the mess that's the web. But you ha

Oh sure. I've written software that does exactly that. I also tend to write my stuff to use TOFU when it's TLS outside of the mess that's the web. But you have to admit the general default for SSL is the PKI implemented in web browsers. Even too often in non-web applications, unfortunately.