> Hmmm possibly. I had assumed introductions would be for people known > already which can be verified out of band...
They probably should be, but even so there are degrees of urgency - if you've obtained the key through a single mutual friend you're more vulnerable than if you've obtained the same key through 4 mutual friends. Maybe the software shouldn't allow you to introduce a friend to anyone until you've verified the friend's key... on the other hand if the restrictions are too tight people will get into the habit of saying they've verified the key just so the software will let them do what they want... dire warnings might be better. Cheers, Michael
