CDR: Is PGP broken? (fwd)