ParentFull threadFiloSottile·Assuming that implementation never skip verifying the second signature, and compare the signing keys, that should be ok.View on HN