Which makes me wonder, why OpenPGP-based http security failed to gain traction. AFAIR, implementations were ready before https in the form of ncsa httpd patches and/or the early versions of apache (I can't remember which one). NCSA Mosaic had patches to communicate with it, too (it used PGP as a back-end).

Does anyone here know why the folks at Netscape developed SSL based on X509 instead of building on the already battle-hardened PGP?