How do you imagine that would work for something like this?
Suppose you live in South America, register a domain from a registry in Canada and then have users accessing it from Ukraine. Are we going to give every local government a global root certificate? Have a single one in California or Texas that every other country is somehow forced to use? Or make it so people in Europe can't access sites in Asia and vice versa?
The existing system is more than the usual amount of messed up but that seems like one of the things that could actually make it worse.
Suppose you live in South America, register a domain from a registry in Canada and then have users accessing it from Ukraine. Are we going to give every local government a global root certificate? Have a single one in California or Texas that every other country is somehow forced to use? Or make it so people in Europe can't access sites in Asia and vice versa?
The existing system is more than the usual amount of messed up but that seems like one of the things that could actually make it worse.