Web of Trust failed? If you saw that a close friend had signed someone else's PGP key, you would be pretty sure it was really that person.