Poke me when a popular web email service implements GPG.
Poke me when a popular web email service implements GPG.
Any current implementation of GPG by _web email_ is probably insecure as it would rely on JavaScript cryptography. Perhaps when the W3C passes the browser cryptography draft, and browsers start adding that in, we might see this. But the economics aren't aligned, because popular web email services want to see what you read and write, so they're not particularly motivated to give you strong encryption.
http://www.cybercrimereview.com/2012/11/hushmail-provides-un...
From where I sit I watch the Amish ride by in their horse-drawn buggies several times a day. I'm about as far away from the Valley as you can get (technology-wise) and it "plays" quite well here also.
That was ten minutes of looking. (Of course, you still have to trust your webmail provider completely... but that's the price of webmail.)