Tim Bray on Nostr: I.e. “send me a C2PA-signed picture and then I’ll have your public key, which I ...

I.e. “send me a C2PA-signed picture and then I’ll have your public key, which I can reliably associate with an email address or social-media account or whatever.” If you have a specific attack against either of those scenarios, I’d love to see it.