[schoen]

That's a public key/private key issue (I think!): the key he sends to Verisign will be the public key from the ceremony, not the private key.

If I'm mistaken about this, I hope the secure channel is very very very secure!

[Diederich]

Indeed! And I'm not even thinking about the communication channel as much as...Verisign. Not picking on them, but it's just a single, US based organization.