Though I understand why this is done and I&#x27;m glad there&#x27;s a XEP now that&#x27;s not broken like the previous one I&#x27;m not sure OpenPGP is viable.<p>It might work for tech savvy users but frankly I don&#x27;t think most people have it in them to correctly and securely manage the lifecycle (creation, access, storage, usage) of a key.