We really need an alternative. Somehow we need to make sure that all communications are encrypted. I understand that there needs to be a cost to prove your iden

We really need an alternative. Somehow we need to make sure that all communications are encrypted. I understand that there needs to be a cost to prove your identity, since the CA needs to invest time in validating the identity of the person or organisation applying. We have a situation currently where encrypted transport is tied to an SSL cert, which in nearly all cases is tied to a cost (because of the CA identity issue). Therefore SSL isn't prevalent enough. I'd like to have SSL on my personal blog and my webmail, but I don't want to pay for a couple of hundred dollars for a wildcard subdomain cert that lasts one year. The NSA stuff shows that we need to switch to a secure transport. It's the only way to hinder the dragnetting.