What trade-off in usability? We don't have standardised mechanisms for sites to provision their own certificates, but if we did then this would be entirely tran

What trade-off in usability? We don't have standardised mechanisms for sites to provision their own certificates, but if we did then this would be entirely transparent to users in a way that PGP isn't.