Going down a Certificate Authority rabbit hole. Is there a way to decentralize this? Something between a chain-of-trust and web-of-trust?

(Not for websites but for messaging)