@lambda@polyproto Ah, yeah :) Out-of-band verification of cryptographic material is sadly still missing from the specification. Thanks for the reminder! I'll make it an issue so that that does not get forgotten about :) If you'd like to give more input on the topic, please do!