The # on my actual key is still valid, and can be trusted. But if those spoofed keys start showing up as signatures on legitimate keys then we're in big trouble! !GnuPG