I agree this would be a good thing. Problem is that then the access of the public key needs to be encrypted too, which in turn means you need to make sure you u

I agree this would be a good thing. Problem is that then the access of the public key needs to be encrypted too, which in turn means you need to make sure you use HTTPS. I think this would be a good thing, but I'm hesitant to make it an requirement.