Hacker News Reader

I think it works much better for contacts. You have to verify contact once and then you are assured that it's still the same person.

> You have to verify contact once

Only if users never replace their keys, which puts them at significant risk in the event of a key compromise.

Replace your key by signing a message announcing your new key?

If your key is compromised, anyone can send that message and sign it with your key... :)