Investigate web-of-trust for signature checking

I am interested in building a de-centralized web-of-trust for determining which application (authors) should be trusted (e.g., because many of my knowledgable friends and their friends trust them).

Check the ideas of **The Authenticity Institute** and whether they could be applied to trusting application (authors) in a web-of-trust:

https://thriveglobal.com/stories/big-ideas-a-license-plate-for-your-online-activity-can-prevent-breaches-phishing-attacks-malware-ransomware-human-trafficking-with-wes-kussmaul-of-the-au/

Related to:
https://github.com/AppImage/AppImageKit/issues/175

Concepts, ideas, and code contributions are welcome. I am not interested in this topic enough to think through this in depth myself, but I am sure a web-of-trust would help (especially novice) users to determine which applications to trust and which ones better not to trust.

Please refrain from stating "it does not work". This merely means that the idea needs to be modified until it works, or that we haven't found out yet how it works. ;-)