There's two things in this thread under the name of "identity verification": automatically verifying the hostname (origin) of a site and manually inspecting the legal name of the entity who requested a certificate. The first is incredibly important, and encryption is useless without it - the second is not.