Getting a KeyPOST Digital Certificate - Part 1 - Applying

[George Michaelson]

  Regardless of who is happy with what, I think a key issue here is that if
  someone else generates your private key, the Public Key security model is
  entirely broken.
  
You may think so. PKAF doesn't. Substitute 'passport' for Public Key and
I think you will see why. (I'm still sitting on the fence)

You prove who you are.

They issue a certificate (or passport) warranting the holder has proved who
they are.

But.. my *own* passport is so much prettier. I like the flower patterns on
the border...

-George