`human.json` is a neat idea and I’ve been watching it closely. I’m even debating dropping one on my own site.
That being said, the fact that the obvious attack vector goes completely unaddressed gives me pause.
That being said, the fact that the obvious attack vector goes completely unaddressed gives me pause.
It would be better if it acted like a vouch tree so you could create a web of trust but there's no enforcement mechanism so I don't even know how that would work.