More separation between message encryption and identity verification. ie. something better than the CA system and "untrusted certificate" warnings. I realise

More separation between message encryption and identity verification. ie. something better than the CA system and "untrusted certificate" warnings. I realise these are actually SSL criticisms but oh well.