Hacker News Reader

Pki here does not mean a global CA. You can run your own CAs (and should).

Since only two parties are involved, why not use the easier pre-shared key system in that case?

For the many reasons I listed. Pre sharesd keys are almost always global and you can’t do forensics to find the leak.