What was the solution to key management? Just wondering what it looks like since the CA system doesn't work, and the GPG approach of key servers is too difficult for the laymen!

As for the spam issue, I am not sure that will ever get solved.