I may speak from ignorance, but why do SSL certificates depend on centralized CA?
If I'm an entity such as a bank, I should be able to sign my own certificate and provide the public keys to my clients which then can use it to both encrypt communications and to make sure you are talking with the entity you want to talk to. Am I missing anything?
> provide the public keys to my clients
How does this part happen? How does the client know that the entity providing them with that public key is who they claim to be?