1. A company you trust is acceptable as a CA. Nowhere did I say it had to be a company. I said users pick the CA's they trust. 2. If they want to distribute it

1. A company you trust is acceptable as a CA. Nowhere did I say it had to be a company. I said users pick the CA's they trust. 2. If they want to distribute it with that CA. Nowhere did I say CA's must require payments. Yes a CA gets a say in who they will verify. That's the point. 3. If the CA gets "popped" or makes a mistake you remove them from your trust list. I don't expect regular people to know how to do this, but they could ask someone they know. 4. You didn't even read my arguments, you are attacking things I didn't say, so you are being intellectually dishonest, not I.