You're saying at Keybase you don't have to compare your fingerprints out of band?

Correct. Key verification is done by looking at signatures on a given user's linked social networks / websites etc

How does it handle DNS spoofing or ip redirection?

And what happens if you have no social networks / websites like me? HN is probably the closest I got to a social network online.

How does keybase do key exchanges?