https://help.riseup.net/en/security/message-security/openpgp/best-practices
link