> Certificates are still a pain in the butt. One of the most cumbersome aspects of the web. They will likely always be a pain and many aspects of Web security

> Certificates are still a pain in the butt. One of the most cumbersome aspects of the web. They will likely always be a pain and many aspects of Web security are cumbersome. It is simply a reflection of the fact that the Web, like e-mail, was not designed to be secure in the first place, being used in organisations where you can rely on trust. As a result the security stuff is just bolted on and often only in response to the previous solution failing. The previous layers stick around like zombie flesh until they are unceremoniously deprecated and cut away a decade later. A new system designed from scratch would be less cumbersome.