> How do I make sure that if I should be trusting the website public key on first use? It doesn't seem like any easier to solve than PKI. Usually such question

> How do I make sure that if I should be trusting the website public key on first use? It doesn't seem like any easier to solve than PKI. Usually such questions get replied to with a recommendation of implementing DNSSEC. Which is also obviously PKI and in many ways worse than WebPKI.