Recently, the Shmoo Group discovered that Firefox is vulnerable to precisely the exploit that i predicted in my 2002 paper—Ping

Right. In practice we get out introductions from a variety of sources, and we apply discretion and due diligence to them as they come in. No biggie. The main thing here is to identify the source of the introduction, it is not the agent’s job to do/measure trust, it is the user’s job to make a trust judgement.

In that sense, the use of the word trust outside of "Alice decides whether she and she alone trusts X" should be treated with suspicion. I’m glad this is starting to be understood:

<financialcryptography.com>—Ian