Ultimatly, there are still some dependencies on third party, but I reduced them to the minimum (If you know / have idea on how to remove even more third party, please tell). And about, autistici.org, the united states were able to do that because they own the “.org” tld. My tld is “.ovh”, so under the control of OVH and french state.

Yes, this part is intentional to raise questions and remark :)

The certificate on my website is not valid using the WebPKI standard, but is valid using the DANE standard. It is related to my comment for this project https://sr.ht/~yukikoo/dane_without_root/ .

My issue with the WebPKI model is that any government or big company on the planet could do a MITM on your connection, generate a certificate valid for any website, and get a read/write access to all your webpki TLS communications. The DANE model is an improvement over webpki because instead of the “anyone (every ca / intermediate certificate) can generate a certificate valid for anyone” model, it bring a hierarchical trust structure.