if the recipient (the online alias owner) has an account on keybase, they will seamlessly receive the message. if the recipient doesn't have a keybase account, and later signs up and proves the link between the online account and their devices, the sender's device will rekey the message for the recipient based on the public proof they posted, allowing them to read the message. since the keybase app checks the proof, it avoids trust on first use.