"A third party will be required in some way, be it a CA or the Web of Trust or something else."