This is where the TOFU model comes in, you implicitly trust the key on first use. Finding a legitimate download one time is better than having to find it every

This is where the TOFU model comes in, you implicitly trust the key on first use. Finding a legitimate download one time is better than having to find it every time. Bootstrapping keys is a difficult thing for sure, but TOFU is still better than nothing at all and seems to work pretty well in practice.