https://signal.org/blog/automatic-key-verification/ Yet another take on the long running problem of how to detect malicious changes in public identifier->public-key directories. With this, Signal is closing down one way they could have been forced to cooperate in a state-run interception regime.