If you were to implement this then all messages would be decrypted on the server side. What would be much better would be to have better public awareness of the importance of using PGP for sensitive PMs.
Also the vast majority of PMs likely do not need to be encrypted as they only contain casual conversation and/or casual business that realistically no one would case about if they were able to intercept.
On a 2nd though I guess you could have a field for a public PGP key that would automatically encrypt messages and the receipt would need to manually copy/paste the message to decrypt, however this would still involve encryption on the server side which is still much less secure then encryption on the client side.
It can be encrypted via Javascript on the client (browser) just before sending the data.
It doesn't need to be encrypted server-side.
Show Posts
