Re: Global PKI on DNS?

[Keith Moore]

> I was wondering if the best system to build a global PKI wouldn't be the
> DNS system already in place?

A global PKI is a Bad Idea.  Nobody is sufficiently trustworthy to be the 
root CA.  

Keith