Reply to post:

Firstly PGP public keys are on the server and placed there by the key owners.

They can be uploaded by anyone who possesses them. Co-workers, anyone with whom you have shared the public key.