Screenshot of a message being sent, with the unlock password for the PGP key, and marked options to tell the server to sign the message.

Notices where this attachment appears

1. Embed this notice
   arcanicanis (arcanicanis@were.social)'s status on Saturday, 21-Jan-2023 08:36:05 JST arcanicanis

   in reply to
   Correction:
   Upon looking at what it sends to the server, it at least does wrap the key, but sends the unlock password in the same request, and operations are done server-side. Attached are the screenshots of the network traffic to the server for key creation, and use of the key (sending a signed email), with the unlock password circled (intentionally a crap password, for demonstration).