Using encryption isn't that hard the problem is authentication - how do you know the person you're talking to is really them? You end up falling back to some

Using encryption isn't that hard the problem is authentication - how do you know the person you're talking to is really them? You end up falling back to some NSA-hackable source (certs, emails, whatnot). You need to implement a confluence-type system where you poll a bunch of sources unlikely to collude (i.e the EFF, PETA, China, and the US) who can authenticate an identity.