Any vendor who cannot figure out PGP should be avoided on principle. Seriously it's not that fucking hard to use!