Your desire for "a TOFU model with automatic key redistribution" is well-founded, and people (including implementers) are trying to do something about this. Ch

Your desire for "a TOFU model with automatic key redistribution" is well-founded, and people (including implementers) are trying to do something about this. Check out the Autocrypt project: https://autocrypt.org/ https://autocrypt.org/ A similar (and complementary) approach is outlined in RFC-7929: https://tools.ietf.org/html/rfc7929 https://tools.ietf.org/html/rfc7929 which is supported by GPG and a few email providers.