Quote Originally Posted by Steamer View Post
It isn't technically a SSL replacement, more so a notary/check system. You can run your own or select notary's you deem trustworthy. If others find discrepancies in a certain SSL cert they will note it and deny it. Think of it as kind of a pool of individuals checking for bad certs and reporting them and amassing said bad certs into a network of checks and balances. The downside is they usually get a longer clear life, so you may want to clear cert's before there lifespan, just for a bit more peace of mind.
like...WOT (web of trust)