You're right in concluding that Mentat doesn't use the web of trust concept from PGP. Each device is assigned a UUID which serves as the safety number binding o

You're right in concluding that Mentat doesn't use the web of trust concept from PGP. Each device is assigned a UUID which serves as the safety number binding ownership between a keypair and a device. This number isn't displayed yet which is a clear flaw but a quick one to fix. See this issue for more of my idea on identity and proving ownership of keys: https://github.com/kenforthewin/mentat/issues/50 https://github.com/kenforthewin/mentat/issues/50 Thanks for the insightful comment.