@darosior
The Bitcoin wallet can also sign the cert on it's own.
My idea was to use SSL certificates just for the fingerprints to avoid fakers by DNS spoofs and Man-in-the-Middle attacks.
SSL is the solution for probably all cons on the list.

@achow101
Thank you, I will take a look at it