"Global hierarchical PKI is dead"

It’s taken two decades to get to this point because signing individual DNS records and treating zones as the fount of all truth on the Internet is the wrong design.

Thomas Ptacek

web