<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class=""><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Apr 15, 2016, at 9:04 AM, Alexandre Anzala-Yamajako <<a href="mailto:anzalaya@gmail.com" class="">anzalaya@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Don't you end up with a single global trusted third party ?</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class="Apple-interchange-newline"></div></blockquote></div><br class=""><div class=""><div class="">I think it would be impractical to have a single root PKG for the</div><div class="">entire planet in a global deployment. That's why the paper discusses</div><div class="">the case where there are multiple root PKGs, just like there are now</div><div class="">multiple root CAs in the TLS PKI.</div></div><div class=""><br class=""></div><div class="">Francisco</div><div class=""><br class=""></div></body></html>