If the vendor doesn't want to use PGP then I recommend you request the vendor to cancel the transaction, maybe it will show them they're losing customers because they're not using PGP!