Comment Re:Why not ... (Score 1) 169
Indeed; just look at the whole CA certificate system. In theory perfectly capable of importing trusted sources, but in practice the major OS and browser vendors have done their best to attach stigma to self-signed certs and hidden the import process behind increasingly cryptic UI. And so we have the current system where CA cert stores are by and large bootstrapped by a handful of vendors and certs themselves are mostly issued by one non-profit. People looking at you weird for issuing self-signed certs now will end up looking at you weird for wanting to preserve privacy over your identity.