@alex yeah I'm not seeing how you can avoid that issue at the level of the underlying primitive itself

what you *could* do though is address it at a higher level. matrix kind of sort of almost does this. when you have multiple keys and they cross sign each other then you've got your own little web of trust. and you can put one of them on a hardware token and stick that in a safety deposit box or something if you want

there was also a framework or spec (???) for software updates that did something like that. I can't remember what it was called sorry

@curtis @Hyolobrika