Interesting that it supports Perfect Forward Secrecy by requiring that all messages are signed and appending several keys in payload. I wonder if it’s possible to add something like that to OpenPGP…