So I actually re-read and followed links (I mean whats wrong with lazy assumptions anymore) tptacek's "why email is insecure" post is here: https://news.ycombi

So I actually re-read and followed links (I mean whats wrong with lazy assumptions anymore) tptacek's "why email is insecure" post is here: https://news.ycombinator.com/item?id=16088386 https://news.ycombinator.com/item?id=16088386 And yes thats what he says in the original latacora post. I read the article '''invariably CC the quoted plaintext of your encrypted message to someone else (we don’t know a PGP email user who hasn’t seen this happen)''' So I made the (incorrect) leap to pgp using the long term key to encrypt files. My bad. But this does not fix the original point it seems - email is not going to be "secure" any time soon. But you can send encrypted files over email to people.