mccrmx on Nostr: That's a great idea. It increases the difficulty of that attack from "impersonate one ...

That's a great idea. It increases the difficulty of that attack from "impersonate one user" to "impersonate a whole graph of users. "Still possible but more annoying to execute.

I think you could use nip05 to anchor parts of the good/true graph to the real world. If your client gets you to verify a couple of well known users you can then trust the rest of the graph over an alternative graph, like web of trust.