I don't know that I agree with this framing. Pgp could support multiple keyrings, for one. Bigger, though, is that the internet isn't a web of trust in the sam

I don't know that I agree with this framing. Pgp could support multiple keyrings, for one. Bigger, though, is that the internet isn't a web of trust in the same vein? Take out the CA chain, and websites fail trust pretty hard. Even adding them, we wind up accepting certificate pinning on browsers, as nobody has a better option, yet. And that is building trust to web sites. The stick houses we have to trust communication is basically, "you always call us." Edit: forgot to say that partial trust is pretty close to "believed, but I wouldn't bank with this identity."