Not really. This while dance is necessary because it's (effectively) impossible to revoke certs on millions of end user systems. It's _far_ easier to handle re

Not really. This while dance is necessary because it's (effectively) impossible to revoke certs on millions of end user systems. It's _far_ easier to handle revocation on a couple trusted endpoints (especially when you own the CA), so 'normal' TLS does the job here just fine. No need for more turtles.