http://nksecur5aoxbew7x4t2jebk7ordomil3a4xubeamno76zexicppwhiad.onion/how-to-pgp.html
There can be any number of signatures on a public key, for example Dan might know Alice, Bob and Charlie. When importing Charlie's key, he might see that it has been signed by both Alice and Bob. This is bad for privacy as it means there is a "social graph" which is not ideal in our situation.