Yes, but that's just PKI again, which is what the OP was trying to avoid.