[Spivak]

Unless you're independently verifying the keys in meatspace you're still trusting the server.