either way, i think this would effectively dissuade me from ever wanting to place an order with a vendor in this situation. not to mention the whole "encrypt if you want - my PGP sometimes works" thing. this whole situation is infuriating to me as a buyer, as a fellow vendor, and as a moderator here. SR is not the place to be lackadaisical about security - not your own and not your buyers'.