Thank you, Werner, for your helpful reply.
One thing I would like to check. You said that gpg
--locate-external-key -v f...@example.org can be used to test this, and
that works. The wiki (https://wiki.gnupg.org/WKDHosting) says to use
gpg --homedir "$(mktemp -d)" --verbose --locate-keys
Hi!
Please don't use PKA. Any remaining support will be removed anyway.
The Web Key Directory is a far better and easiert way to get
certificates. In fact it is enabled by default and used transparently
in Kleopatra and with the Windows GpgOL plugin. Other Unix mailers
might also have support