Yes, that is one of the things that turned out to be a bad idea. That's why it was dropped. Look, it's all about trust management. If you trust everyone's good

Yes, that is one of the things that turned out to be a bad idea. That's why it was dropped. Look, it's all about trust management. If you trust everyone's good will, like in an academic community, it's fine. If not, you need to manage trust. There are three models for it AFAIK: initial trust, as in SSH; trust to the authorities, as in X.509; and the web of trust, as in PGP/GPG. They all have their use cases. I like the opportunity to choose.