Pete wrote: > No, but if Mary turns out to be someone who signs PGP keys for people > I don't like.
The job of the CA is NOT based on liking; it is one of authenticating the subscriber and issuing a certificate. The authentication of subscriber is defined by the CA's CPS.
