Yeah, I think that’s fair. As a nerd, it does seem to me like I should be able to give the bank a public key and let me worry about my own security. But I don’

Yeah, I think that’s fair. As a nerd, it does seem to me like I should be able to give the bank a public key and let me worry about my own security. But I don’t think this is actually what the bank or the user wants—they don’t want encryption per se, they want authentication, and an HTTPS link in an email (that you have to login to view) achieves that.