Or cut to the chase and just deploy DANE, so that we don't need CAs to sign anything? http://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities h

Or cut to the chase and just deploy DANE, so that we don't need CAs to sign anything? http://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities http://en.wikipedia.org/wiki/DNS-based_Authentication_of_Nam...