@lberrymage@infosec.exchange @normplum@fosstodon.org @celenity@infosec.exchange @accrescent@infosec.exchange I could trust more or less to IronFox Accrescent badge because it's in the repository. https://gitlab.com/ironfox-oss/IronFox But that whole story of the domain verification does not seem bulletproof for me. Signer key check is a different story.