That and PGP, AFAIK, also doesn't really do perfect forward secrecy. If you get the private key, you can decrypt all stored messages. That said, you provide th

That and PGP, AFAIK, also doesn't really do perfect forward secrecy. If you get the private key, you can decrypt all stored messages. That said, you provide the answer: use PGP's asymmetric encryption to establish a session key, then use that to communicate.