&gt; He can open his encrypted mailbox only with the passphrase that you (the sender) shared with him.<p>Presumably that passphrase would be shared out-of-band to prevent Tutanota peeking, at which point... Why bother sending an e-mail at all?