Which is a common compromise and frankly more useful than the web-of-trust model, as long as users understand the limitation and verify once offline.

It's still unclear to me how this works if you use more than one email client.