@nightpool Fun fact: a collaborator of mine, Christopher Allen, was both largely responsible for TLS/SSL design and also was wholeheartedly against certificate authorities (he wanted SPKI/SDSI)
Thus, I like to call him "TLS CA", a name he doesn't like to be referred to as