[jbpetersen]

Without a history all it takes is one leaked key to invalidate all credentials from a given source.

There are no guarantees against credentials being tampered with whenever a new version of that source is established.

[grey-area]

They could sign with multiple keys, some offline.

Bitcoin also offers no strong identity verification.