Hi! Thanks for the summary. I fully agree add these 2 cents:
In particular using a fixed subject is not going to work in any real business because you are not able to ignore mails. For my part, I even use a auto-responder to tell that mails with a three-dot subject are ignored. There is a simpler method than autocrypt to initially convey a key. If you can't MIME-attach it, include your key in the signature (gpg's --include-key-block). This is what S/MIME does for decades. If you don't have the recipient's key (i.e. no Web Key Directory), signing the first message allows the recipient to reply encrypted. Shalom-Salam, Werner -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein
openpgp-digital-signature.asc
Description: PGP signature