@mxey @scy I was about to write just about the same. I'm sure that PGP (any variety) *can* be used securely, but it's just too damn hard.

The "packet" format is so useless that you could have sign-then-encrypt or encrypt-then-sign and never know which.

When last I looked (which is admittedly some time ago), PGP still supported many many now dangerously obsolete algorithms. I understand why they do that, but it's certainly not an endorsement to use it as the crypto layer for a new messenger.