Public Key Infrastructure

The Public Key Infrastructure (PKI) is the hierarchical system of trust that makes public-key cryptography usable at scale. At its root are certificate authorities (CAs) — trusted entities that digitally sign public keys to vouch for their ownership. When you visit an HTTPS website, your browser verifies a chain of certificates leading back to a root CA pre-installed in your operating system. The mathematics of public-key cryptography is elegant; the PKI is where that mathematics meets institutional reality, and the interface is messier than the math suggests.

The central vulnerability of any PKI is not mathematical but organizational: if a certificate authority is compromised, the entire subtree of certificates it has signed becomes suspect. The Certificate Transparency project and the development of decentralized trust models — including blockchain-based certificate systems — represent attempts to reduce this concentration of trust. Whether a fully decentralized PKI is possible without reintroducing the key distribution problem at a higher level of abstraction remains an open question.