I propose a system like SSH fingerprints. Then anybody can maintain a database of "known fingerprints", and a web-of-trust can be established without depending

I propose a system like SSH fingerprints. Then anybody can maintain a database of "known fingerprints", and a web-of-trust can be established without depending on a centeral-point-of-censorship. Fuck CA's. They're not and never have been trustworthy: https://en.wikipedia.org/wiki/DigiNotar https://en.wikipedia.org/wiki/DigiNotar https://en.wikipedia.org/wiki/Xcitium#Certificate_hacking https://en.wikipedia.org/wiki/Xcitium#Certificate_hacking https://arstechnica.com/security/2025/06/chrome-boots-2-certificate-authorities-citing-a-lack-of-trust-and-confidence/ https://arstechnica.com/security/2025/06/chrome-boots-2-cert... https://www.zdnet.com/article/google-guillotine-falls-on-certificate-authorities-wosign-startcom/ https://www.zdnet.com/article/google-guillotine-falls-on-cer...