[vkoskiv]

Anyone can download the public key and impersonate that person in a scheme like this.

[notpushkin]

Unless you require them to authenticate using that key (which would obviously require them to have the private key on hand).

[arjvik]

What you are describing is the current status quo