That sounds like a good stop-gap. But I would prefer either GnuPG or PGP for the key infrastructure, similar to the plug-ins available for desktop mail clients. What I *really* want is an extension that can seamlessly and easily encrypt any data on any web form. I think webmail is just a good starting point, but why limit it to that?