[Hoff]

For your own web servers and your own clients, use your own CA and your own certs.

[eropple]

This isn't a serious solution except for intranets--and this problem exists most pressingly on the internet to begin with.