for something as important as verifying binaries for bitcoin software, it's a wonder that very few people do it.

1. few developers sign their binaries
2. few users verify those binaries

we can do better and for those developers who sign their binaries, unless you suspect your master key has been compromised, there's no need to rotate it. that's what subkeys are for.

gm!