It's easy to call the CA system broken (and I think it really is), but other, better solutions are not that easy currently. We want an open, yet secure web, an

It's easy to call the CA system broken (and I think it really is), but other, better solutions are not that easy currently. We want an open, yet secure web, anonymous at best. With the current setup, that is not so easily possible. Letsencrypt might help, but even with that, there is still someone you need to beg for a signed cert. Maybe we need to think ahead.