On a side note, I have no idea why pgp is not more common in that industry. It's completely insane. In some ways, you'd be better off sending your legal correspondence on a postcard with attorney/client priveledge disclaimer at the bottom.
> Case in point: just a few weeks ago Goldman Sachs mistakenly sent a sensitive email with account information to a random Gmail user because someone fumbled some keystrokes and sent to a “gmail.com” account instead of a “gs.com” account. The email contained such sensitive information that the only recourse Goldman had was to get a court order to require Google to retract the message. Just this month, the UK’s Information Commissioner “sounded the alarm” for lawyers in an attempt to get them to realize that unencrypted email is an unacceptable risk for privacy.
It is by far the weakest link in terms of law firm information security these days.
Maybe because pgp is still the same pain the butt it was back in the 90's. Nothing significant has been done to improve the user experience.
Meanwhile, roll forward to 2022 and there are now dozens of good quality secure document sharing platforms, all of which have full web, desktop and phone/tablet integration.