[javascripthater]

Web of Trust failed? If you saw that a close friend had signed someone else's PGP key, you would be pretty sure it was really that person.

[BugsJustFindMe]

Identity is a lot easier than forward trustworthiness. It can succeed for the former and fail for the latter.