Establishing identity without certification authorities