Comments by "Jasper Mooren" (@jaspermooren5883) on "Man in the Middle Attacks u0026 Superfish - Computerphile" video.

I don't quite understand, the whole point of signing a message with a key is so that you know that that person has to be the one who sent it right? Or at least someone who has that private key. You check with their public key if they used their private key without actually having their private key. Why do you need an authority for that? You can just have a library of public keys, right? That library can be widely distributed to ensure the validity of the library. I don't see the problem here.
1