See my response to superkuh elsewhere in this thread. This would introduce new problems and, overall, would probably make Web PKI worse.