There is a common element in both cases I raised, viz how do people
get certificates before the infrastructure envisioned in RFC 1114 is
fully established.
Since we seem to be in agreement on the first case, let me focus on
the second case. Suppose a knowledgeable person, say a leader in his
field like Matt Bishop, wants a certificate. What should he do? Does
he need to get Dartmouth University registered as a CA before he can
get a certificate for himself? That's a lot of overhead and delay.
Matt (or any other professor), want to jump in here?
Steve