Thanks for the namecalling. I use PGP quite often. And I know how hard it is and how much it lacks. But I'm no 'privacy nut'. A legitimate easy and underused

Thanks for the namecalling. I use PGP quite often. And I know how hard it is and how much it lacks. But I'm no 'privacy nut'. A legitimate easy and underused option is how kraken employs it. I've uploaded my public key. They now send all transactional, security and other mail signed and encrypted. This is a solid solution to phishing. The only part 'missing' is how I get my pub key on my kraken account. For me it was an export+copy+paste. But it should probably as easy as an OAUTH alike flow between kraken and my mailprovider. 'Kraken wants to import your public key to sign and encrypt it's emails to you'. An UI thing.