[theboss]

Funny. I typed up my edit2, hit enter, and had a reply from you basically saying the same thing. Also, I never said anything about use-cases, signing code, etc. Only "does this safely get you the primitives", not about what you can do with them. The "you say" in your explanation are not what I said.

[IgorPartola]

Must have crossed paths. Yes, essentially it boils down to the fact that having crypto primitives can be easily done but gives you absolutely nothing in terms of what you can actually do with it. You need a different infrastructure to deliver code/binaries to do that (such as distro packages), and the web, by its definition, is not that.

This has been discussed many a times on here, by tptacek and others. In fact, at one point I had a similar discussion with him on here. It seems like it's something that people have to think through before they see the problem (which speaks to the complexity of the issue here).