? Comments re key servers? re gpg-encrypted mail? re key servers carry many phony keys?

[Robert J. Hansen]

> What do you kind folks out there make of comments at
> https://stallman.org/gpg.html

Completely orthodox.  Certificates retrieved through the keyserver network
should not be trusted until/unless verified.

Some people are moving to embrace TOFU, which changes these rules somewhat.
For my money, though, I don't (and won't) use TOFU.