@blastfamy
Nice approach but it is not that simply. In order for PGP to work, SSL has to be switched off. PGP will look up if an email recipient is listed in the global PGP LDAP, if not, it sends unencrypted.
The logic is simply that if PGP were only a “decryption cipher”, then why the need to switch off SSL/TLS. Since the client can’t send with SSL on I’d guess they use an SSH Tunnel of sorts.
Question is, does the plugin generally use a secured tunnel, or only if the global LDAP has a public key for the recipient email.
Reading through the documentation it seems one has to forward the pop and smtp ports to the local machine, in order to avoid sending unencrypted in case the receiver has no public key.