DNSSEC. Take everything you don't like about the CA system. Sign it over to the government, because everyone knows they'll never manipulate the DNS to accomplish a policy goal. Then bake it, along with 1990s-era RSA cryptography, into the core of the Internet.
Thanks, Fedora.