@a0b872c9 It uses a secore DNS to get the public key. The explanation says it needs a secure DNS provider, but doesn't go into any detail about where to find one.
It looks like it could pick one automatically, or you can pick your own on the "increased security" setting.
But that means all trust has to be with this one provider. 
If the provider is good, it is beneficial.
But if the provider is malicious or compromised, it could be disastrous. 

 @a0b872c9 This sounds really good. But then I went to the page about configuring it, and it shows Cloudflare as an example of a secure DNS provider.
I am not sure if I trust Cloudflare at all. 
It looks like this is one of the things that is really awesome if you spend a bunch of time and effort setting it up correctly, but it can be dangerous when just set to "auto". 

 @5a6faefc @b5389a6b @b11b2287 @85bba2c2 Dude, ich war letzte Woche von Mo-Fr "unerwünschten Inhalten" ausgesetzt, und nächste Woche auch wieder.
So auf Arbeit und ÖPNV und so. Probier das doch auch mal. Also in echt, *wirklich* rausgehen und so.
Ich hab jedenfalls genug hiervon. Meine spärliche Freizeit ist mir einfach zu schade, um sie auf die Art zu vergeuden.