This is a very long sentence.  Also, I would make it clear that the key server is untrusted.