1 point
OK poof there are now 100 name servers delegating .com. Which one does your ISP default you to? [1-100]
All of them, find one that responds an answer valid for my local saved key.
The DNS server is no longer an authority on its own, just your keyring matters.
1 point
0 points
The certificate authorities on my ring that I trust. For normal people that’s already included in their OS or browser