Hacker News Reader

Correct. Key verification is done by looking at signatures on a given user's linked social networks / websites etc

How does it handle DNS spoofing or ip redirection?

And what happens if you have no social networks / websites like me? HN is probably the closest I got to a social network online.