Comment by itistoday2

So, blockchain solutions do work, and here is how:

https://github.com/okTurtles/dnschain

You can replace all CAs with a single blockchain.

And we should do this, because this Let's Encrypt CA, while a great step forward, is still vulnerable to man-in-the-middle attacks, explained in this video:

https://vimeo.com/100433057