alt Hacker NewsSo, you're right that this does work in theory, but it obviously doesn't scale, right? We can't have every person physically go to every storefront they want to purchase something from and then drive home with a USB stick. What if I in Minnesota want to buy something from Florida or France?
The role CAs play is to be a trusted identity verifier so we don't have to have millions of people driving around to do key exchanges in person.
That makes sense. The downside is that now if said CA has some interests in whether to re-issue a certificate or not, we have a problem. Imagine that Cloudfare decides you are a bot and doesn't allow you to visit pages. You are going to have a problem because a lot of websites use it
I think the idea of a CA is good but it should be distributed somehow