Agreed, depending on how paranoid you are. The server serving the .asc file over SSL could still be compromised (among other things). Similarly you are unable a

Agreed, depending on how paranoid you are. The server serving the .asc file over SSL could still be compromised (among other things). Similarly you are unable ascertain that recipient's private key isn't compromised either, or recipient is forced to decrypt, et cetera.