So what would that transition look like, how would you phase the roll out? Practically how would this work and would the result be worth the effort to each individual involved or would it be a utopian ideal for ‘the greater good’?
The result would allow us to avoid situations arising from incompetent or malicious signing authorities, like DigiCert Sdn Bhd or Diginator. The problems addressed are not delusional dystopian fantasies, but rather the security of the internet. Malicious signing happens, just read the news. All non-malicious entities using https should be overjoyed by the availability of a more secure system. The only problem I see for adoption is network effects.