This seems to propose that the namecoin block chain could be used as an alternative to root certificates, but without the client needing to participate in the block chain. But this means you have to trust a third party service (and your connection to it) to serve you correct information from the block chain. How exactly does that work?