Just use Signal. It's not 1999 anymore. Public key has been productized all over. When it warns you that someone's identity has changed, that's the time to doub

Just use Signal. It's not 1999 anymore. Public key has been productized all over. When it warns you that someone's identity has changed, that's the time to double check out of band, because under the hood the public key changed. SSH is another example of something that productized the ideas in PGP but easy and straightforward (for typical Unix users at least) I'm sure there's others