PGP Contact Forms

This is a project to provide client side pgp encryption of user and site-wide contact forms using the OpenPGP.js library.

Visitors with javascript enabled will be able to click on an "Encrypt this message" button on any contact form for a user who has uploaded their public key. Because this encryption happens on the client side, clear text is not transmitted over the network.

The goal of this project is to encrypt form submissions before they are submitted. This avoids sending plaintext messages over the network, thus providing end-to-end encrypted communication, which is not the case with solutions that encrypt messages after submission, server-side, using tools such as gnupg.

This module attempts to make this process as secure as possible, but for better security, I recommend using SSL on deployments.