It sounds like domain registrars are being used to supplant the role of CA&#x27;s?<p>This reminds me of the situation with email where if a user has not purchased a domain name, then it is nearly impossible for the user to send or recieve email without a third party &quot;email provider&quot;.<p>Will encryption become the same?  If at least one endpoint has not signed up with some third party (e.g., letsencrypt) _and_ purchased a domain name, then it becomes nearly impossible for two endpoints to encrypt traffic between them?<p>Will we ever again allow users to be fully empowered, _without the involvement of third party endpoints_ (CA&#x27;s, domain regstrars, etc.), to send email, encrypt traffic, and all the other basic things one can do with a computer and an internet connection?  Is it unfathomable that two parties connected to the internet might actually know and&#x2F;or trust each other already, without involvement of a third party interloper?<p>Those are meant to be yes or no questions, or perhaps a rhetorical ones.  No need to provide rationale.  :)