@cwebber
DNS is inherently federated though. It only SEEMS centralized because most people don't run their own DNS. We could easily set up a social DNS that uses a different set of tlds (for compatibility with existing DNS) if everyone could agree on how to deal with disputes--and then tell their computers to prefer that DNS.
SSL is a bit harder, but you don't *HAVE* to use external CA. Every instance could be self-signed--though this poses its own problems.