You should send all sensitive information encrypted with PGP, it is definitely not a good idea to send it in plain text!