> But why store the signature in a blockchain? For the same reason as certificate transparency logs; you want to avoid trusting something that has a history of

> But why store the signature in a blockchain? For the same reason as certificate transparency logs; you want to avoid trusting something that has a history of certifying false statements. You also need to handle throwaways, so it's definitely not sufficient (and might turn out to not be necessary once a complete solution is found), but it does seem useful.