I don't know if there's really a good way to implement it. No matter how you do it, it seems to have the same problems as SSL CAs and certificates (that is, so

I don't know if there's really a good way to implement it. No matter how you do it, it seems to have the same problems as SSL CAs and certificates (that is, some CAs are corrupt/negligent/compromised). And in your proposal, what do you do if the root key ever gets compromised?