The big reason that cert's are as unused as they have been for two decades is because of the stupid desire to incorporate identity along with encryption.

They've both useful- they've more useful together, and they're expensive and not used everywhere because of the identity problem.

This is just going to have to be accepted (for a while?) to get proper encryption.

Pointing out that this can happen is neither useful or news, and perpetuates this nonsense that's been holding us back.