I suppose a quick lookup to keybase for a gpg key (as it already asks for email), and then encryption with: https://github.com/openpgpjs/openpgpjs https://gith

I suppose a quick lookup to keybase for a gpg key (as it already asks for email), and then encryption with: https://github.com/openpgpjs/openpgpjs https://github.com/openpgpjs/openpgpjs Would be one approach. Or, as a link is sent "out of band", I suppose one could simply provide a symmetric key in the email. Not as secure - but might be sufficient.