This quote from the above article is simple bunk!:
' People love the convenience of webmail, but it's just not as secure as a desktop client, and therefore many cryptographers simply don't bother writing browser plugins for email encryption. "It is simply not possible to produce a secure email system that works in the webmail context," Marlinspike told us. "So most people who are interested in working on secure email haven't even bothered, because it's a non-starter." ' There is nothing different about web based email systems regarding message security with PGP or GPG from standalone email clients. What is needed is a standalone PGP or GPG client which encrypts a text message offline into a PGP or GPG encrypted message which can be saved locally as a file, or just copied and pasted into a blank email message, whether that is on a standalone email client or one that exists on a web page, like Gmail, Yahoo mail, or whatever. The message is already encrypted, and is unreadable no matter which email system sends it! Same at the receiving end. The message is encrypted whether on the web page or in Outlook, or Windows Live Mail, or Apple mail, or Gmail, or Yahoo mail, or Eudora, or Pegasus Mail or anything else! The encrypted message then just needs to be copied into a text editor and/or pasted directly into desktop PGP or GPG, where it can be decrypted and read! Voila!!!