The original PGP idea was a "web of trust", which meant doing key signing parties and you hopefully ending up with a transitive chain of trust to anybody you might want to contact.
Just blindly downloading keys from a keyserver and hoping they're the real thing was not the idea.
Just blindly downloading keys from a keyserver and hoping they're the real thing was not the idea.