> the federation protocol could easily define how the authoritative hash/key for each user would be shared based on their e-mail

That really doesn't sound that easy in a federated protocol.