[hinata08]

I saw I was downvoted, with no reply to learn more about where I was wrong. (I don't get this site, where ppl know you're wrong but are unable to post a better idea. Is this about discussing topics to learn more, or shooting ppl down ?)

Did I miss something ? Can someone give me some clue ?

Digital signatures are an interesting topic.

[ElTimuro]

I also agree with you for what it's worth. Even it is somewhat possible, it should be WAY more open and free. Like SSL it's not a luxury competitve edge, but basic modern day infrastructure

[hinata08]

there are some initiatives for that, like CACert, a non-profit certificate authority. and ofc, there was GPG

But they're not convenient for businesses : either they buy certificates for their employees, or they have them signed by the IT department, that provisions their key into any piece of corporate equipment.

Few companies are into the community initiatives, especially when it comes to security.

Also, CACert is not widely recognized. The root certificate is only included in a handful of Linux distros (like Arch or Mandriva, but not Debian)

[ElTimuro]

Is CAcert still alive? I read the project kinda died