@feld @frogzone @jeffcliff @silverpill

> We'll do ed25519 if it's gonna actually stick.

Well, it's not too much trouble from my end to support verifying signatures using another key type.

I do not have strong opinions on the keys in use (because it doesn't make a huge difference and will change every few years), just that the old ones stay supported indefinitely.