Steve,
I'm still waiting for the complete description of the
semantics for the proposed alternative certificatin system you
periodically allude to. Not just a description of how to change the
top most part of the tree, but a discussion of what rules are common
to all of the top tier entities and who enforces them, how CRLs are
managed across these fifedoms, whether there is a common policy that
deals with issues like name subordination and, if not, how the UA
software knows how to validate certification paths, how the system
scales to accommodate introduction of lots of theese top tier entities
without resorting to bilateral agreements, etc.
Steve