I don't understand how using HTTPS for the API has any bearing whatsoever on the WoT built via PGP.
You can still verify the keys with your client's cached copies, or using another PGP client.
You can still verify the keys with your client's cached copies, or using another PGP client.