That article states why PFS for email isn't really all that useful: > As far as I know, Brown et al.'s proposal is not often used. One reason for this is that

That article states why PFS for email isn't really all that useful: > As far as I know, Brown et al.'s proposal is not often used. One reason for this is that forward secrecy is not always desired. For instance, if you encrypt a backup using GnuPG, then your intent is to be able to decrypt it in the future. If you use forward secrecy, then, by definition, that is not possible; you've thrown away the old decryption key. They are two different tools for two different jobs.