[folex]

So the main problem is that on _identity_ key change, the new one isn't required to be signed with previous identity key? If so, that's plain stupid, isn't it?

[aidenn0]

It's a natural consequence of "My phone got run-over/lost/stolen"