@rdh @jordyd Also might as well link this while I'm at it, here's a paper on petnames we never finished but has the core ideas https://github.com/cwebber/rebooting-the-web-of-trust-spring2018/blob/petnames/draft-documents/making-dids-invisible-with-petnames.md
If you can understand that, you can start to understand how to kill CAs and DNS.