WoT won't work, yes. > Sure, the PKI isn't too great, but its what we have, and it is currently more practical than any other solution out there. Security need

WoT won't work, yes. > Sure, the PKI isn't too great, but its what we have, and it is currently more practical than any other solution out there. Security needs to be usable to be useful. But I disagree with you here, there are better solutions that are just as easy to use: - Some options: namecoin. If you own the domain you can easily sign stuff with the same key you use to own the domain - Put stuff in DNS's TXT record once DNSSEC is rolled out. (Or create a new record) Or take a look at TOR hidden services for example. You enter a onion domain. And you're there. Guaranteed. No messing around checking if there is a green lock or messing around with a WoT. Note namecoin might not be there yet to be usable for 08/15 users. And most of them probably don't want the blockchain locally. But it's easy to imagine that you just have your ISP still provide you some sort of DNS service.